lk0so8xzwn.x23inc.site/
200 OK 600 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash e000d82ea84204dee204ebd92b29cbaf
a82a9b4c0d7ffd0586bfd8fc9df05a3853a8ac0c
0f88072290c506a3f4e2308aac879e45b4130f1de6bbda8e9b3071993f9f7285
GET / HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.33
Refresh: 1;url=https://allnewsfeed.pro/product?stream_uuid=5d5b9202-6524-46d5-a09d-7bbf51672643
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hInatzdmpKYlbmsKL8kH6tIJA5XZvopTq4ZLDzJAikogKieAVJhlLSLbphdHuFCE9gq3Rmu%2FksT1OkdZMX42HYemdRAe%2BYU1fhahehfn%2FtlBCfWgtLJQQ6VsyAOMw5aW3uOTt28MzAQ9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792c7b818ccbb524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7e05c8461bd2dc5a149f71e2c465ea29
705983959c887e243cb55a8a1796757b579ee977
4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21369
Expires: Wed, 01 Feb 2023 23:38:23 GMT
Date: Wed, 01 Feb 2023 17:42:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 62de35a6c8e4efd7633fc5236b5b086f
6a92912a86dfcd0330d040cef06bef36889c76ab
ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3840
Expires: Wed, 01 Feb 2023 18:46:14 GMT
Date: Wed, 01 Feb 2023 17:42:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 16:43:25 GMT
content-type: application/json
age: 3529
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19291
Expires: Wed, 01 Feb 2023 23:03:45 GMT
Date: Wed, 01 Feb 2023 17:42:14 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UglbHvWjWU5ZRWIYeqZ4tOhFibw3ceBoRFOdtfo4HrEKkzTGTSSqHX+O68IYgF86RnRjeX4ySSo=
x-amz-request-id: HC8BHQ16BEZA6MT0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 17:22:45 GMT
age: 1169
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:42:14 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
lk0so8xzwn.x23inc.site/assets/libs/jquery-mask-plugin/dist/jquery.mask.min.js
200 OK 3.4 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/libs/jquery-mask-plugin/dist/jquery.mask.min.js
IP
File type ASCII text, with very long lines (537)
Hash d6d7e39ed6abb474e8834ac085c002ca
98f4567727a4ef9a185a2b996ff1778b315e06ad
832581beb6270c58a8f6070024e612fac4f5380d0000d67e8922321bcfec0441
GET /assets/libs/jquery-mask-plugin/dist/jquery.mask.min.js HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 May 2019 23:09:30 GMT
ETag: W/"5ce879aa-1ff9"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UyoS8WQ%2FvjK77g3ias6doh1yLx44g8JlEMNrlShtx5jFyJYS%2BSvy4ME%2B5TZEhL9zhfE3mWFDhNG962uWUoNNkyqIk%2F2kRbjwiJSIf%2Bq1meLNTO40fPZjkKtTpGUQlv3OIp7yUEhjMEuw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b83fd64b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
lk0so8xzwn.x23inc.site/assets/libs/autosize/dist/autosize.min.js
200 OK 1.3 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/libs/autosize/dist/autosize.min.js
IP
File type ASCII text, with very long lines (3507)
Hash 13302ceea6773e1fea5230f015879850
170092f9bc574079e9b03a0e0651c4531c13044b
301481b962e043d5fafe4052ccd25f44c21df86be0a9db5636d9db812d4d8d43
GET /assets/libs/autosize/dist/autosize.min.js HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 May 2019 23:09:30 GMT
ETag: W/"5ce879aa-dfc"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qIcU9NB0qy6g8S%2B74bv54F%2BqVwSj%2FheRD5sQ7U46G%2FsmfXq%2FVKNNkOjBc%2FUDRRvXsq5FfBHoSQ7WlktfmNGIUZGJVs%2FoUCa3cXjh2DeZsdu6ZDPFpMLo%2F7zbweGdARQy5RigcDfjiZCh"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b83febc0b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
lk0so8xzwn.x23inc.site/assets/fonts/feather/feather.min.css
200 OK 2.1 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/fonts/feather/feather.min.css
IP
File type ASCII text, with very long lines (10082), with no line terminators
Hash 0f79806c3926211b7537a2747969bea7
db324c717509bfe11570ec45f0ad0225c8ae8ae3
d3e3e9fb0722beec2a34c3408132ea6885f994ab44f7f7709b36fde959c927e4
GET /assets/fonts/feather/feather.min.css HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 May 2019 23:09:30 GMT
ETag: W/"5ce879aa-2762"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3RLzQrqyU8gtDQOa48cSn2yWt4ViyPxLrIXI%2BqWCN4tcZAJNAAGM8KqfV%2B%2BALhv%2BrJfmA4h4RiVRq4Hpi6FEz6Qn1ExcqLO1EK%2FBN4SyCHlsGbXHopFkKn2ZEwebTsHc1T6T4GUS%2Fcv%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b83e8f6b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
lk0so8xzwn.x23inc.site/assets/libs/bootstrap/dist/js/bootstrap.bundle.min.js
200 OK 22 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/libs/bootstrap/dist/js/bootstrap.bundle.min.js
IP
File type ASCII text, with very long lines (65297)
Hash b20b73bfe71ff7f2772e8f621e7eab12
664c5f6c13c016f58179d86ab241a306b0d659e6
8e430b8b2a802334e6b1a35d7a226102d99d4980f690da9d32abb6b3739bde1d
GET /assets/libs/bootstrap/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 May 2019 23:09:30 GMT
ETag: W/"5ce879aa-1332b"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zro59h%2B%2Bl7C8FLxR3Ck67%2F8JiIUMXJhkGf9%2FQ3d47uVYPasCr3Z0FA%2FuV2FYScWpCWRB4qTz1o2YTNPk4MjvjZz%2FoYBl7zvDJS18C0f6UlV2qadrN166U66wlkac%2FYtewCUqXuOuvrcZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b83fc641bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
lk0so8xzwn.x23inc.site/assets/libs/jquery/dist/jquery.min.js
200 OK 31 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/libs/jquery/dist/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 281e79c3468c820c3ed6b99e34a11ab6
844ce27bc796bdd5a4d8aa7615caa89abcf20ce4
1163e4002fb365ebb7e2d9302ab8a09501ce126646d50e2ae2d08a5c6aefc647
GET /assets/libs/jquery/dist/jquery.min.js HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 24 May 2019 23:09:30 GMT
ETag: W/"5ce879aa-15851"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dBI%2F4ua8G%2Be5BB9fVmYeRVuwNwnv3%2FZcqX0EQXDqoMkEwTxwPIjhpWESDJaij7zoWfzoFnfFYHGUqKNR%2FTg8qSKJc32nw7ZfnaWZK3uiJru9nmlv2sod%2Fn08AlO%2FjJ%2FSH66inbeIyODa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b83faa1b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
lk0so8xzwn.x23inc.site/assets/css/theme.min.css
200 OK 37 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/css/theme.min.css
IP
Hash 790d4742d5372e2844bb0f19fd11fa5a
eb14d72b15dd6dbc51742d12cff506ebdc55b660
6dc34acd1ab87eddc7936486713754e7f8c6f4b759c332a4adf2b1e4b7c897d9
GET /assets/css/theme.min.css HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 11:29:38 GMT
ETag: W/"63d658a2-40950"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iqgZFYzFYGRVR0uWvJYW9kDOhuuZudX9ESeDrroLBkvEm3WgLgqsf4GE0gBlJaBQtO1sk8HyNwYN3FyPQ72%2BfzCCgorigMJSNEnZclPcSu8ts%2Blg%2BtkPDx6UlLME9dZDNWhk6Iwho1iK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b83ef7cb51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
lk0so8xzwn.x23inc.site/assets/js/theme.min.js
200 OK 85 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/js/theme.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash df690c48a1fa9f7bcb0aad2e84cedc5c
a504ee688350d25665d26f0a8c9d7a3ad6774a29
bed09bb62b9673893a47fa3188d92d8d9a7f29aa7d72212ddafbb20b8834b9ca
NIDS Severity Alert suricata high ET HUNTING Possible Obfuscator io JavaScript Obfuscation
GET /assets/js/theme.min.js HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 16:08:18 GMT
ETag: W/"63d7eb72-3a6cd"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lW7zQbfrz%2BlIh9EF%2FxdzhpFPlM8mRHVBXKcpFRnsrnDz78vaV8M85aIbQ5CChAcwBtubglItj3cQ2UfVHMOTetTCoevGoIx5OhEzEf9wstpygpK4j2JPzTpeZ7%2FRPMoF3meIqz8UWD3S"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b847e2bb503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 16:49:05 GMT
age: 3189
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
lk0so8xzwn.x23inc.site/assets/fonts/cerebrisans/SFUIDisplay-Medium.woff2
200 OK 49 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/fonts/cerebrisans/SFUIDisplay-Medium.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 48832, version 1.0\012- data
Hash 0d8112ea4c8c4839f8aaa12ec19b6008
8d5e226577cab263116ae0fe21d253b96a1006e9
5d4a6031ceb6df122244fc170f8349cc4946a1c8387adf122ff37acb801d2f0d
GET /assets/fonts/cerebrisans/SFUIDisplay-Medium.woff2 HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/assets/css/theme.min.css
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:14 GMT
Content-Length: 48832
Connection: keep-alive
Last-Modified: Sun, 08 Jan 2023 02:29:08 GMT
ETag: "bec0-5f1b76a488500"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gh9H0A8S5tRc1VO%2FxYXkGTBA7pe7YQaO%2B3RH7jqg4N0AyeNeBi1IQ99dLctZUskSU9T7lVzHFWksRufalry7QFwIkqhKIYAgwZ4enE2owKx0MMlOKrnHPQCqCLwXmJa1UYiM%2F20kMqb8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b868900b503-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2220
Expires: Wed, 01 Feb 2023 18:19:15 GMT
Date: Wed, 01 Feb 2023 17:42:15 GMT
Connection: keep-alive
lk0so8xzwn.x23inc.site/assets/img/favicon.ico
200 OK 8.4 kB URL HTTP/1.1 lk0so8xzwn.x23inc.site/assets/img/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel\012- data
Hash f98d0d29cf6680119361a67a27d80832
d472730ec0638756405ab9bf03a49449a6886c49
240b2f7389c5f212d1f9a3afe6457a3694c516ed90c77401b2a77e636753b1bc
GET /assets/img/favicon.ico HTTP/1.1
Host: lk0so8xzwn.x23inc.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lk0so8xzwn.x23inc.site/
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:15 GMT
Content-Type: image/vnd.microsoft.icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 11:09:32 GMT
ETag: W/"23b1-5f25f9e1bf300"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rSLq2zXdHX4D51m8hSTQvVF5HTdz8LAB57OJkBSqIzfRF0B4A1%2BggRPI2Ic0hTNkCOAqO%2BfTBMo%2BW%2F7AInWDSL37UAXjLY5aw7TujipDcP25ay9XJmTw3lPQqyEQj%2FUKRh5wdN3P4cRr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b876a81b503-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: hmf0LHT1Kp/IBQxVAKKyUw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3vcBtXqPOwKbdRqCfrT97y1/kS8=
cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
200 OK 86 kB URL HTTP/2 cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js
IP
Hash 773bdd85a54f9ef75b7902adc6aafe98
b945653fbf5e58fb77f65fcce9f4b4fd94c04681
2453e1432eb778452fdbd78cd518947f51a1eabc5dcbfe731a418fca5198af62
GET /npm/yandex-metrica-watch/tag.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.257.0
x-jsd-version-type: version
etag: W/"34e3a-eIUrj6hD3pmnKAQZCp7YaNtM0Rc"
content-encoding: gzip
accept-ranges: bytes
date: Wed, 01 Feb 2023 17:42:16 GMT
age: 14745
x-served-by: cache-fra-eddf8230060-FRA, cache-bma1671-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 85751
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 701 B IP
Hash ad07631ec0c8e468e3c92cfef18cd04a
8458024e25908bbf221f5ba8a8c9d8e29553a8a5
4b50d89352593ddb3eb8a4595ec55cac727e80a9346118c6ddc4922f65272321
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
allnewsfeed.pro/product?stream_uuid=5d5b9202-6524-46d5-a09d-7bbf51672643
200 OK 8.8 kB URL HTTP/2 allnewsfeed.pro/product?stream_uuid=5d5b9202-6524-46d5-a09d-7bbf51672643
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1350)
Hash 02624cc4f7eb522d78b91a0c23d3b23d
806a937726144c8b699c6b44f4ec3a0215d0e321
8cdda23ce823558b1576990a8ee9b2e6cc66524e4bce6b114602fe2996d63aef
GET /product?stream_uuid=5d5b9202-6524-46d5-a09d-7bbf51672643 HTTP/1.1
Host: allnewsfeed.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:42:16 GMT
content-type: text/html; charset=UTF-8
cache-control: private, must-revalidate
pragma: no-cache
expires: -1
set-cookie: lna-surfer-uuid=645d970b-111d-464e-a8a3-43bcac134f4a; expires=Thu, 01-Feb-2024 17:42:16 GMT; Max-Age=31536000; path=/; httponly
first-entry=1; expires=Thu, 01-Feb-2024 17:42:16 GMT; Max-Age=31536000; path=/; httponly
lna-visit-uuid=42dca110-37b2-4837-ab92-7a01c254514c; expires=Wed, 01-Feb-2023 18:42:16 GMT; Max-Age=3600; path=/; httponly
933944d88ecce57e229ab6d74504d5f4=1; expires=Wed, 01-Feb-2023 18:42:16 GMT; Max-Age=3600; path=/; httponly
stream_uuid=5d5b9202-6524-46d5-a09d-7bbf51672643; expires=Thu, 01-Feb-2024 17:42:16 GMT; Max-Age=31536000; path=/; httponly
utm_source=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
utm_medium=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
utm_campaign=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
utm_content=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
utm_term=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
subid1=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
subid2=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
subid3=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
subid4=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
subid5=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
f77a73a2566298dbd0081dd379e362f0=1; expires=Thu, 01-Feb-2024 17:42:16 GMT; Max-Age=31536000; path=/; httponly
is-cpc-level-1=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
is-cpc-level-2=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
is-cpc-level-3=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
is-cpc-level-4=deleted; expires=Tue, 01-Feb-2022 17:42:15 GMT; Max-Age=0; path=/; httponly
visit-counter=1; expires=Wed, 01-Feb-2023 18:42:16 GMT; Max-Age=3600; path=/; httponly
cpc_level=3; path=/; httponly
owner_id=30668; expires=Thu, 01-Feb-2024 17:42:16 GMT; Max-Age=31536000; path=/; httponly
pw_segments=00000000-0000-0000-0000-000000000000; expires=Sat, 07-Jan-2023 09:22:16 GMT; Max-Age=0; path=/; httponly
current_user_url=http%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643; expires=Thu, 01-Feb-2024 17:42:16 GMT; Max-Age=31536000; path=/; httponly
lna-trek-uuid=5acbd8b7-6b3c-4915-afd8-587e8feb0db5; expires=Wed, 01-Feb-2023 18:42:16 GMT; Max-Age=3600; path=/; httponly
laravel_session=ZCcZkQCn5s4y5lWY5CnceCkXX4C0faKU0KUz9I8K; expires=Wed, 01-Feb-2023 19:42:16 GMT; Max-Age=7200; path=/; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4CJ6AMDlp%2BtQfYPQCaB6rrL05VtiG21GFYbzJ8BVZHLsYZ4GUQJBE%2FVvT%2BDiTLwS8TW8Aktrs2mKuu3hunZOhus%2F6P1Gup%2BrzeY9dn%2BNMNWM5FwCO21vVN9cuy%2FGFZNcMos%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792c7b8e0d61b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-PGHNQHL
200 OK 50 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PGHNQHL
IP
File type ASCII text, with very long lines (34402)
Hash a67ba087e7ebeee721de2893aaca3256
9a82cde25d84c6a2dcb27175ab746fb56d365dd7
d4d5a6284f8e27c3636f7d3d8d6cf6e5547c38864e94d9dcf4bcaccf8da06161
GET /gtm.js?id=GTM-PGHNQHL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 17:42:16 GMT
expires: Wed, 01 Feb 2023 17:42:16 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Feb 2023 17:04:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38811
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 782 B IP
Hash 39ae6138347cf25c0bd3d3d7ab1efb89
7dd68b0155f02041ba81358cee9a13c7bd2d6658
16ec11b81d15c9f45784fba05e7a4dd45f265f244661fed815b32f7effcc6351
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7988
Expires: Wed, 01 Feb 2023 19:55:24 GMT
Date: Wed, 01 Feb 2023 17:42:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7988
Expires: Wed, 01 Feb 2023 19:55:24 GMT
Date: Wed, 01 Feb 2023 17:42:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e8e0173672ec76c01676a1ba4e1be857
3d01334320c94972440226cfe96c8c7646cae796
c75aea885e434e8bf53e439c4b441e2af4b228f70212001fcc4c8094f534e0f1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C75AEA885E434E8BF53E439C4B441E2AF4B228F70212001FCC4C8094F534E0F1"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7988
Expires: Wed, 01 Feb 2023 19:55:24 GMT
Date: Wed, 01 Feb 2023 17:42:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 23db22ce2120fbb0ae6109e1a046062d
2068c8d9a5bc30a17be658e198e26c64a80703cf
f307ba6c4929d9f0c9354334b7baea878da379138489d9689bb777c4da308dab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: f466c962-7b12-4923-a4be-7ff9fce372a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaWFP_IAMF9wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-7a8c027d58f5b9132bb68a33;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XtqfgDxskGIUmZdRj2nrGDpo9KvECk528eLZV29xNx3h7CLOu49mnQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:19 GMT
age: 71997
etag: "2068c8d9a5bc30a17be658e198e26c64a80703cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 02:29:58 GMT
age: 54738
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3c83dcdb618756ebbfeb69a8bff6d38c
5f909182ab6847690e7ebd100e3f0d2798e36192
2e29d0747fb973908228501178465ac09f6553ef8e50dd70ee617f3379eb733c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F591a38fc-2daf-42e7-a48b-a02e54cb63e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7049
x-amzn-requestid: bc6522f2-eb6b-4e59-9912-0c03d145f021
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk31LGE2IAMF8rw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839ba-67477ed1260c27f67e28043d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q_aVbWJKMbX1_bjggzbdnWbgmfooGvXj76t55QGGXRr_y6ZgW2gctw==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 12:23:45 GMT
age: 19111
etag: "5f909182ab6847690e7ebd100e3f0d2798e36192"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 12:57:00 GMT
age: 17116
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78fe9a77211d6f9a462f625af0c6f9bc
ac0b58423d7578e7a1b60a62220c0a57924dda82
e047466c3ae0a55509f4ace49d0476f94271b5a25e71caa3b06ec468a238b652
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14041
x-amzn-requestid: 2be6655d-3b0e-4e65-b44b-11682610b640
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRGFpIAMFbMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-5554d18d5db235913afa77a2;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jJHVbOXepgkVHjuNJG9wPcMjDcGbAc-NIpv_KUECG6c-AnJZoIW0zg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:42:56 GMT
age: 71960
etag: "ac0b58423d7578e7a1b60a62220c0a57924dda82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
200 OK 22 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
IP
Hash 952e47c39b67a83eda03d02a46592ea1
2f3db677c4b6fbdb140d62d1fa1f290b64feeb59
37c4aea3d8646a559c778f1be413cc907993d807bd612790184f7c7df4a60586
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5736
x-amzn-requestid: 895ee89b-8d2e-42f9-a392-466557f8a0d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffEtEGk_oAMFYPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e7ed-026a1b0d79dc7eb572317bd2;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:28:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4yxwz2MFTdpb8I56VVbFU2Zz0qG_uHcYc3aDtn6boQPjhw7UFLLnYw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 10:37:09 GMT
age: 25507
etag: "f5e411cda74cb7fb4a662f4787e9543b9749c8b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 55f843aa50059ed477ea1562d3c1bf19
a1dc7548036ada96d9bd54793b70e06d22c52c97
176568b84f4286bb3da51dcffd689dcd9b155e63289fec721f215e1e1a01b091
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:16 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sun, 05 Feb 2023 16:10:05 GMT
ETag: "a1dc7548036ada96d9bd54793b70e06d22c52c97"
Last-Modified: Wed, 01 Feb 2023 16:10:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2111
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b927a98b4f1-OSL
mc.yandex.ru/watch/62742313/1?wmode=7&page-url=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A451%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A545392686293%3Ahid%3A945781729%3Az%3A0%3Ai%3A20230201174239%3Aet%3A1675273359%3Ac%3A1%3Arn%3A202205819%3Arqn%3A1%3Au%3A167527335964408660%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A29%2C15%2C151%2C0%2C%2C0%2C%2C195%2C0%2C%2C%2C%2C447%3Aco%3A0%3Ans%3A1675273358378%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675273359%3At%3AInteresting%20this%20week&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 419 B URL HTTP/2 mc.yandex.ru/watch/62742313/1?wmode=7&page-url=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A451%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A545392686293%3Ahid%3A945781729%3Az%3A0%3Ai%3A20230201174239%3Aet%3A1675273359%3Ac%3A1%3Arn%3A202205819%3Arqn%3A1%3Au%3A167527335964408660%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A29%2C15%2C151%2C0%2C%2C0%2C%2C195%2C0%2C%2C%2C%2C447%3Aco%3A0%3Ans%3A1675273358378%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675273359%3At%3AInteresting%20this%20week&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash d8bf9d3c6d1e93fdd30b09dda8e64e3e
cb158ce6701ed1963d520270863672e9c3ff7da7
67aea253577ae8398890e1adf39857460c587dd7848bf54cbe017729fbd2836b
GET /watch/62742313/1?wmode=7&page-url=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A451%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A545392686293%3Ahid%3A945781729%3Az%3A0%3Ai%3A20230201174239%3Aet%3A1675273359%3Ac%3A1%3Arn%3A202205819%3Arqn%3A1%3Au%3A167527335964408660%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A29%2C15%2C151%2C0%2C%2C0%2C%2C195%2C0%2C%2C%2C%2C447%3Aco%3A0%3Ans%3A1675273358378%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675273359%3At%3AInteresting%20this%20week&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://allnewsfeed.pro
Referer: https://allnewsfeed.pro/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 419
date: Wed, 01 Feb 2023 17:42:16 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://allnewsfeed.pro
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 17:42:16 GMT
last-modified: Wed, 01-Feb-2023 17:42:16 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 01 Feb 2023 17:42:16 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Wed, 01 Feb 2023 18:42:16 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FW1JQ04721&cid=338108811.1675273359>m=2oe1u0&aip=1&z=1657061980
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FW1JQ04721&cid=338108811.1675273359>m=2oe1u0&aip=1&z=1657061980
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-FW1JQ04721&cid=338108811.1675273359>m=2oe1u0&aip=1&z=1657061980 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Feb 2023 17:42:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 938 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 79770c2173817a4978171af339bdc8e8
276f7a0e3d97f6843302e79039e28aac8e18b9c1
0ac3ac9acf432c05162fa0962d05cbd818991f56a10aa2833762380a19630cf2
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 17:42:16 GMT
Content-Type: application/ocsp-response
Content-Length: 938
Connection: keep-alive
Expires: Sun, 05 Feb 2023 15:06:29 GMT
ETag: "276f7a0e3d97f6843302e79039e28aac8e18b9c1"
Last-Modified: Wed, 01 Feb 2023 15:06:30 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 916
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792c7b93cc58b4f1-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a4253e662d539c01b8656dbb6d73aab1
08f71eead367b6fa76b99f7f590680a5f5650b62
f05b99f6b0c8fb5c38221d02c0c9ed96389fbd5105d6329cdc733d1fae411df2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
top-fwz1.mail.ru/counter?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675273359500%3A1675273359517%3A1%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.633275514868722
302 Found 0 B URL HTTP/2 top-fwz1.mail.ru/counter?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675273359500%3A1675273359517%3A1%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.633275514868722
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675273359500%3A1675273359517%3A1%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.633275514868722 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 01 Feb 2023 17:42:17 GMT
content-length: 0
location: https://top-fwz1.mail.ru/counter2?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675273359500%3A1675273359517%3A1%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.633275514868722
set-cookie: FTID=1RMYgQ0tkIIF:1675273337:3239004:::; path=/; expires=Fri, 02-Feb-24 17:42:17 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/counter2?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675273359500%3A1675273359517%3A1%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.633275514868722
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/counter2?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675273359500%3A1675273359517%3A1%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.633275514868722
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /counter2?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;lvid=1675273359500%3A1675273359517%3A1%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.633275514868722 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://allnewsfeed.pro/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:42:17 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675273337:3239004:::; path=/; expires=Fri, 02-Feb-24 17:42:17 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643%26googleIdTh%3D645d970b-111d-464e-a8a3-43bcac134f4a%26id%3D30668%26;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675273358378/////0/12/40/40/56/43/56/207/245/215/401/446/446/1240/1240/;ni=;lvid=1675273359500%3A1675273359631%3A2%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.9208733635996899;e=RT/load;et=1675273359630
200 OK 219 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643%26googleIdTh%3D645d970b-111d-464e-a8a3-43bcac134f4a%26id%3D30668%26;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675273358378/////0/12/40/40/56/43/56/207/245/215/401/446/446/1240/1240/;ni=;lvid=1675273359500%3A1675273359631%3A2%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.9208733635996899;e=RT/load;et=1675273359630
IP
Hash 510dd2006100eb11e61aad66eaadb48e
9b66301aa711f8120704a4088248690cf956d186
287d8b98aec2fe81b7ffc54d3c00f1cadfd28cf4029af99606ab650f60fff11b
GET /tracker?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643%26googleIdTh%3D645d970b-111d-464e-a8a3-43bcac134f4a%26id%3D30668%26;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;nt=0/0/1675273358378/////0/12/40/40/56/43/56/207/245/215/401/446/446/1240/1240/;ni=;lvid=1675273359500%3A1675273359631%3A2%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.9208733635996899;e=RT/load;et=1675273359630 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:42:17 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675273337:3239004:::; path=/; expires=Fri, 02-Feb-24 17:42:17 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-FW1JQ04721>m=2oe1u0&_p=1418551428&_gaz=1&cid=338108811.1675273359&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675273359&sct=1&seg=0&dl=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&dt=Interesting%20this%20week&en=page_view&_fv=1&_nsi=1&_ss=1
204 No Content 0 B URL HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-FW1JQ04721>m=2oe1u0&_p=1418551428&_gaz=1&cid=338108811.1675273359&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675273359&sct=1&seg=0&dl=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&dt=Interesting%20this%20week&en=page_view&_fv=1&_nsi=1&_ss=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FW1JQ04721>m=2oe1u0&_p=1418551428&_gaz=1&cid=338108811.1675273359&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675273359&sct=1&seg=0&dl=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&dt=Interesting%20this%20week&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://allnewsfeed.pro
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://allnewsfeed.pro
date: Wed, 01 Feb 2023 17:42:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/g/collect?v=2&tid=G-FW1JQ04721&cid=338108811.1675273359>m=2oe1u0&aip=1
204 No Content 0 B URL HTTP/2 stats.g.doubleclick.net/g/collect?v=2&tid=G-FW1JQ04721&cid=338108811.1675273359>m=2oe1u0&aip=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-FW1JQ04721&cid=338108811.1675273359>m=2oe1u0&aip=1 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://allnewsfeed.pro
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://allnewsfeed.pro
date: Wed, 01 Feb 2023 17:42:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash acd316ed514317c57031cf8a2f4e175f
6ac4cf84e6c6aa49e56b0816435730e4cc6f05ea
5ca00b626043fb28f127446d75a0c997b474a5fafcb4d671d9e824e56c91b5a6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5CA00B626043FB28F127446D75A0C997B474A5FAFCB4D671D9E824E56C91B5A6"
Last-Modified: Mon, 30 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16250
Expires: Wed, 01 Feb 2023 22:13:07 GMT
Date: Wed, 01 Feb 2023 17:42:17 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2dc2e297877f6332a114de88eeeaca61
cc91e58f3dd132b078223d21cd3177f0819e40e7
94f1191402d63bc2757d7ec854bc418dd6929b5aa9efb815d9bd35f8dab98fef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.luckypush.pro/push-server-init.js
200 OK 57 kB URL HTTP/2 cdn.luckypush.pro/push-server-init.js
IP
File type ASCII text, with very long lines (56719), with no line terminators
Hash d0f8df2aee56479ae36f5923a2d72433
d078fc0c7d3ee9524973440e22f8ec0e4f9c8c50
d5c02fe33dd0a1e00187f72107d8191c292160491ff52cdea9207897d7d6f870
GET /push-server-init.js HTTP/1.1
Host: cdn.luckypush.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:42:17 GMT
content-type: application/javascript
content-length: 56719
last-modified: Thu, 22 Dec 2022 14:20:16 GMT
x-rgw-object-type: Normal
etag: "d0f8df2aee56479ae36f5923a2d72433"
x-amz-request-id: tx00000000000000966b053-0063daa431-370b669b-ams3c
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 29e1df5b12744556be86a2fbdf80184f
516d17a338d87a04e399638ee7381a351ec6e2b6
1a7f293e82d136c07b5788ab18c110fb45498df9a630c3283b2a1c88353b75d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2655
Cache-Control: max-age=121871
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:17 GMT
Etag: "63d9d329-117"
Expires: Fri, 03 Feb 2023 03:33:28 GMT
Last-Modified: Wed, 01 Feb 2023 02:49:13 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash 29e1df5b12744556be86a2fbdf80184f
516d17a338d87a04e399638ee7381a351ec6e2b6
1a7f293e82d136c07b5788ab18c110fb45498df9a630c3283b2a1c88353b75d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2655
Cache-Control: max-age=121871
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:17 GMT
Etag: "63d9d329-117"
Expires: Fri, 03 Feb 2023 03:33:28 GMT
Last-Modified: Wed, 01 Feb 2023 02:49:13 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
tracker.luckypush.pro/v3/config?page=https://allnewsfeed.pro&api_key=
200 OK 0 B URL HTTP/2 tracker.luckypush.pro/v3/config?page=https://allnewsfeed.pro&api_key=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v3/config?page=https://allnewsfeed.pro&api_key= HTTP/1.1
Host: tracker.luckypush.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://allnewsfeed.pro/
Origin: https://allnewsfeed.pro
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Cache-Control: max-age=0
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:42:17 GMT
content-length: 0
allow: GET, OPTIONS
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5x659k6aJUQAp6UcuroiPI85aQHZ1Qn4OLSW0BbyWDcS9iIOpN1iWVaVEbq5Fa15gYMl2HGj1a4LdcZSQmDXgU5Whc%2FxAobxbmTE3LwfaXrls%2B9oqSK%2Boljs29ta10jDnDbwza2hynw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792c7b98dab2b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 29e1df5b12744556be86a2fbdf80184f
516d17a338d87a04e399638ee7381a351ec6e2b6
1a7f293e82d136c07b5788ab18c110fb45498df9a630c3283b2a1c88353b75d6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2655
Cache-Control: max-age=121871
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 17:42:17 GMT
Etag: "63d9d329-117"
Expires: Fri, 03 Feb 2023 03:33:28 GMT
Last-Modified: Wed, 01 Feb 2023 02:49:13 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 279
tracker.luckypush.pro/v3/config?page=https://allnewsfeed.pro&api_key=
200 OK 384 B URL HTTP/2 tracker.luckypush.pro/v3/config?page=https://allnewsfeed.pro&api_key=
IP
File type JSON data\012- , ASCII text, with very long lines (428)
Hash 8876a02656a46880f4bda617780e4bb9
b13dd81e2f23904a4659c52fc01860ee008a6aac
eb73fd59711b8b9976e418f5e03f2d99197e587614e31e4035c9704a480010ae
GET /v3/config?page=https://allnewsfeed.pro&api_key= HTTP/1.1
Host: tracker.luckypush.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://allnewsfeed.pro
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:42:17 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nYEobE9%2B6VuEq9KMa4Rzv%2FBNfL1b8txT9Ek7WVaAdJx0yw%2BtH1oc%2Br4XRdLN%2BY7ZryFgFqovK2hh3upD44Or%2FU%2F8cNjKG6THETb2Q1pABN6Ad9tgNbjB0H6%2F31nW%2Fqs%2FsCKGQqXZ5Vo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792c7b996b87b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.luckypush.pro/sw.js
200 OK 1.4 kB IP
File type ASCII text, with very long lines (1435), with no line terminators
Hash 96882b1abd1d541f04257c7185406f8d
95a9888c3bf553a57798347ad6fb8dc0ade4c97d
eb11ddbdfba3951dcb9243f12d2fd947f2d7ab7e95b7b54de903aaf70efd4773
GET /sw.js HTTP/1.1
Host: cdn.luckypush.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:42:17 GMT
content-type: application/javascript
content-length: 1435
last-modified: Thu, 22 Dec 2022 14:20:15 GMT
x-rgw-object-type: Normal
etag: "96882b1abd1d541f04257c7185406f8d"
x-amz-request-id: tx00000000000000966faf6-0063daa412-370b7a2c-ams3c
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
tracker.luckypush.pro/v3/sw/events?event=install&version=0.2.0
200 OK 17 B URL HTTP/2 tracker.luckypush.pro/v3/sw/events?event=install&version=0.2.0
IP
File type JSON data\012- , ASCII text
Hash 03b507b91616ee29114af71ad019d7db
626b24639b827006b10ae7015bba66a98a982855
da46a49b1f860eef4a92b8a6371329d3797aae639c1d2ff21e9105773bb49e14
GET /v3/sw/events?event=install&version=0.2.0 HTTP/1.1
Host: tracker.luckypush.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://allnewsfeed.pro/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 01 Feb 2023 17:42:18 GMT
content-type: application/json
content-length: 17
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U76haaETPEL51dUhMFWCz%2FbSPta8FHB8S%2FQQAeHu%2F96UIWkazH2dEhxThebv7csiLxd0cs7yx%2Fi6bUl4Q6ucn5k3IAu%2BbiWjMeU%2FPN08Fc7emDuMKNH2aAy80qZx73tY4JQaVHDMr0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792c7b9a8d53b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
top-fwz1.mail.ru/tracker?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643%26googleIdTh%3D645d970b-111d-464e-a8a3-43bcac134f4a%26id%3D30668%26;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1675273359500%3A1675273365420%3A3%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.14644268747746236;e=RT/unload;et=1675273365418;pvt=6639;vtauto=5923
200 OK 43 B URL HTTP/2 top-fwz1.mail.ru/tracker?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643%26googleIdTh%3D645d970b-111d-464e-a8a3-43bcac134f4a%26id%3D30668%26;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1675273359500%3A1675273365420%3A3%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.14644268747746236;e=RT/unload;et=1675273365418;pvt=6639;vtauto=5923
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9bb191c6827273aa978cab39a3587950
25d8043336eb799e52b1a0e15ff6b95e09c24e35
24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db
GET /tracker?js=13;id=3239004;u=https%3A//allnewsfeed.pro/product%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643%26googleIdTh%3D645d970b-111d-464e-a8a3-43bcac134f4a%26id%3D30668%26;st=1675273358779;pid=USER_ID;title=Interesting%20this%20week;s=1280*1024;vp=1280*939;touch=0;hds=1;frame=0;flash=;sid=8a73023ffe32c902;ver=60.3.0;tz=0%2FUTC;ni=;detect=0;lvid=1675273359500%3A1675273365420%3A3%3Afe1d37f150c68faad9725d7140763bc5;opts=dl%2Cjst-gtag-ym;visible=true;_=0.14644268747746236;e=RT/unload;et=1675273365418;pvt=6639;vtauto=5923 HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:42:23 GMT
content-type: image/gif
content-length: 43
set-cookie: FTID=1RMYgQ0tkIIF:1675273343:3239004:::; path=/; expires=Fri, 02-Feb-24 17:42:23 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: private, no-cache, no-store, max-age=0
pragma: no-cache
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/62742313?wmode=7&page-url=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A451%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A545392686293%3Ahid%3A945781729%3Az%3A0%3Ai%3A20230201174239%3Aet%3A1675273359%3Ac%3A1%3Arn%3A202205819%3Arqn%3A1%3Au%3A167527335964408660%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A29%2C15%2C151%2C0%2C%2C0%2C%2C195%2C0%2C%2C%2C%2C447%3Aco%3A0%3Ans%3A1675273358378%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675273359%3At%3AInteresting%20this%20week&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/62742313?wmode=7&page-url=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A451%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A545392686293%3Ahid%3A945781729%3Az%3A0%3Ai%3A20230201174239%3Aet%3A1675273359%3Ac%3A1%3Arn%3A202205819%3Arqn%3A1%3Au%3A167527335964408660%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A29%2C15%2C151%2C0%2C%2C0%2C%2C195%2C0%2C%2C%2C%2C447%3Aco%3A0%3Ans%3A1675273358378%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675273359%3At%3AInteresting%20this%20week&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/62742313?wmode=7&page-url=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A451%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A545392686293%3Ahid%3A945781729%3Az%3A0%3Ai%3A20230201174239%3Aet%3A1675273359%3Ac%3A1%3Arn%3A202205819%3Arqn%3A1%3Au%3A167527335964408660%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A29%2C15%2C151%2C0%2C%2C0%2C%2C195%2C0%2C%2C%2C%2C447%3Aco%3A0%3Ans%3A1675273358378%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675273359%3At%3AInteresting%20this%20week&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://allnewsfeed.pro
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /watch/62742313/1?wmode=7&page-url=https%3A%2F%2Fallnewsfeed.pro%2Fproduct%3Fstream_uuid%3D5d5b9202-6524-46d5-a09d-7bbf51672643&charset=utf-8&browser-info=pv%3A1%3Avf%3A14qzoz81s4a176hik6jd9j%3Afp%3A451%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A545392686293%3Ahid%3A945781729%3Az%3A0%3Ai%3A20230201174239%3Aet%3A1675273359%3Ac%3A1%3Arn%3A202205819%3Arqn%3A1%3Au%3A167527335964408660%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A29%2C15%2C151%2C0%2C%2C0%2C%2C195%2C0%2C%2C%2C%2C447%3Aco%3A0%3Ans%3A1675273358378%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675273359%3At%3AInteresting%20this%20week&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 01 Feb 2023 17:42:16 GMT
access-control-allow-origin: https://allnewsfeed.pro
set-cookie: yabs-sid=593136021675273336; Path=/; SameSite=None; Secure
i=tCfCnggWXKP8eye8WzfXpwNBmmaxpjFQsw9NkpCP9nSI8mJQY4cEZ1g6J66zMbvKM8qWwzIth9QzBj4NVw+xRQGvHQc=; Expires=Sat, 29-Jan-2033 17:42:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=155976361675273336; Expires=Thu, 01-Feb-2024 17:42:16 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=155976361675273336; Expires=Thu, 01-Feb-2024 17:42:16 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1706809336.yc.1675273336#1706809336.yrts.1675273336#1706809336.yrtsi.1675273336; Expires=Thu, 01-Feb-2024 17:42:16 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 01-Feb-2023 17:42:16 GMT
last-modified: Wed, 01-Feb-2023 17:42:16 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
top-fwz1.mail.ru/js/code.js
200 OK 0 B URL HTTP/2 top-fwz1.mail.ru/js/code.js
IP
GET /js/code.js HTTP/1.1
Host: top-fwz1.mail.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://allnewsfeed.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 17:42:16 GMT
content-type: application/javascript
last-modified: Wed, 11 Jan 2023 13:29:54 GMT
set-cookie: FTID=1RMYgQ0tkIIF:1675273336:0:::; path=/; expires=Fri, 02-Feb-24 17:42:16 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure
etag: W/"63beb9d2-85cc"
expires: Wed, 01 Feb 2023 18:42:16 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS
access-control-allow-headers: *
amp-access-control-allow-source-origin: *
access-control-expose-headers: AMP-Access-Control-Allow-Source-Origin
timing-allow-origin: *
x-content-type-options: nosniff
p3p: CP="NOI DSP COR NID CUR PSA OUR NOR"
cache-control: max-age=3600, private
accept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version
accept-ch-lifetime: 86400
content-encoding: gzip
X-Firefox-Spdy: h2
188.114.96.1
172.67.158.152
104.18.20.226
87.250.250.119
146.59.70.26
23.36.77.32
93.184.220.29