freesoftrus.ru/soft/ccleaner_professional_4.15.4725.zip
302 Moved Temporarily 154 B URL HTTP/1.1 freesoftrus.ru/soft/ccleaner_professional_4.15.4725.zip
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /soft/ccleaner_professional_4.15.4725.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 04 Nov 2022 17:01:11 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://freesoftrus.ru/soft/ccleaner_professional_4.15.4725.zip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b7be8442ec1e518ccc80739495f6d047
7a9d24b9d4046262c7753c49afaf9c19f4840626
b93410a9d62da3f219796d753b61a0f730cc272c13596724aa9d20efba298b44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B93410A9D62DA3F219796D753B61A0F730CC272C13596724AA9D20EFBA298B44"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6972
Expires: Fri, 04 Nov 2022 18:57:24 GMT
Date: Fri, 04 Nov 2022 17:01:12 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash cd02b32dbc8416dcb10b468af2166c33
503a9c4cabdb19dfde769f5e2d3ef919c818c364
46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3678
Cache-Control: max-age=149471
Content-Type: application/ocsp-response
Date: Fri, 04 Nov 2022 17:01:12 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 10:32:23 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash cd02b32dbc8416dcb10b468af2166c33
503a9c4cabdb19dfde769f5e2d3ef919c818c364
46ca638514d9d4cf252762fdac37a5e7b1da550fcc9911070b0b26a6aa6150a7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5910
Cache-Control: max-age=151703
Content-Type: application/ocsp-response
Date: Fri, 04 Nov 2022 17:01:12 GMT
Etag: "6364dbd9-1d7"
Expires: Sun, 06 Nov 2022 11:09:35 GMT
Last-Modified: Fri, 04 Nov 2022 09:31:05 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3527f898221f8ba6b5015f6decc100
ead93baa0e9d3a6297be3377dc3a624e5a3f509a
73a068f907cc50dd60af18d545b4264dd44bc4b9f40bf9adfceea157fdc33099
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "73A068F907CC50DD60AF18D545B4264DD44BC4B9F40BF9ADFCEEA157FDC33099"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3511
Expires: Fri, 04 Nov 2022 17:59:43 GMT
Date: Fri, 04 Nov 2022 17:01:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qvRcyfRFHZKl7zZIMHTWHh22jpnvfrwud/6R/ELOe9hZHA8x0BgXiUmKUefYCWhVPYHA3VGsHUo=
x-amz-request-id: 3ATE9MCN8E8RBKKE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 04 Nov 2022 16:09:39 GMT
age: 3093
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 17:01:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
freesoftrus.ru/soft/ccleaner_professional_4.15.4725.zip
302 Found 219 B URL HTTP/2 freesoftrus.ru/soft/ccleaner_professional_4.15.4725.zip
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2cc73509ef1dd1ddc8b271073be7f77b
6b7d5fdfe6b717c964160d8eed92d57d58f57cce
a42bf05514b0483c3c69c5868192ae010958ce05915cea880ca28dbf29f34db3
GET /soft/ccleaner_professional_4.15.4725.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Fri, 04 Nov 2022 17:01:12 GMT
content-type: text/html
content-length: 219
location: http://freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
302 Moved Temporarily 154 B URL HTTP/1.1 freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
Analyzer Verdict Alert fortinet Malware
GET /Soft/ccleaner_professional_4.15.4725.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 04 Nov 2022 17:01:12 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: https://freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
404 Not Found 417 B URL HTTP/2 freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (524), with no line terminators
Hash 4d0093edba3221470c79c894bef37333
b1b34325301400f6b8564b60224534595d356fb7
2cd68ab22743ca5ddeac80e6cd8e5d9e5beafc8eaa986e17dbfd46783ccfe13a
Analyzer Verdict Alert fortinet Malware
GET /Soft/ccleaner_professional_4.15.4725.zip HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
date: Fri, 04 Nov 2022 17:01:12 GMT
content-type: text/html
content-length: 417
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3694a72e502e364dfeb03668e6f455f2
767f48e2ec21f21a7ec035b1d18e0f710b81aa1d
c259bce42c7982cc585244570593e4a39a6b8740a23c405520bfe5204cfc1e86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C259BCE42C7982CC585244570593E4A39A6B8740A23C405520BFE5204CFC1E86"
Last-Modified: Thu, 03 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19634
Expires: Fri, 04 Nov 2022 22:28:26 GMT
Date: Fri, 04 Nov 2022 17:01:12 GMT
Connection: keep-alive
parking-static.jino.ru/static/components/page/icons/page_404.svg
200 OK 499 B URL HTTP/2 parking-static.jino.ru/static/components/page/icons/page_404.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (499), with no line terminators
Hash 7efb6e8eda87a19d2028aa758f88ff10
81d7902d5881f729691b344c2c9044029a495181
81e371f6addeef07303702e4a876628776991a5906914b81e797319b224eab92
GET /static/components/page/icons/page_404.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: image/svg+xml
content-length: 499
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "1dc09d84-1f3"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 42a0adacced30df52cf7cad3e200036d
f7b4114defc61f806dbb74fd228bca155d52362a
e4928481739a2a75dce86c03b355c6dff507426e8d851cba5ca8537b1be87c20
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6525
Cache-Control: max-age=147259
Content-Type: application/ocsp-response
Date: Fri, 04 Nov 2022 17:01:13 GMT
Etag: "6364c817-1d7"
Expires: Sun, 06 Nov 2022 09:55:32 GMT
Last-Modified: Fri, 04 Nov 2022 08:06:47 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 344aeec38312486b2dc31e17bc01649e
e31a56ef12007bff5c76fb0a4a5bc2a07f76f484
2b6a8634a5dc2cb7015c71caec454d02c4ce818ae7b3a2decc918ec40d2e6596
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2B6A8634A5DC2CB7015C71CAEC454D02C4CE818AE7B3A2DECC918EC40D2E6596"
Last-Modified: Thu, 03 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13686
Expires: Fri, 04 Nov 2022 20:49:19 GMT
Date: Fri, 04 Nov 2022 17:01:13 GMT
Connection: keep-alive
freesoftrus.ru/favicon.ico
404 Not Found 417 B URL HTTP/2 freesoftrus.ru/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (524), with no line terminators
Hash 4d0093edba3221470c79c894bef37333
b1b34325301400f6b8564b60224534595d356fb7
2cd68ab22743ca5ddeac80e6cd8e5d9e5beafc8eaa986e17dbfd46783ccfe13a
GET /favicon.ico HTTP/1.1
Host: freesoftrus.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/Soft/ccleaner_professional_4.15.4725.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: text/html
content-length: 417
server: Jino.ru/mod_pizza
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 5bfe5400701f8c2f3e28a39c3d41dc0d
1251dbc1aeb54cddafb64843c0317c94101d30ae
244d8e5167f51da91106da6af1acab15dfd3c577104cde1ae817b53959f7eaf7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 17:01:13 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Tue, 08 Nov 2022 12:42:35 GMT
ETag: "1251dbc1aeb54cddafb64843c0317c94101d30ae"
Last-Modified: Fri, 04 Nov 2022 12:42:36 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3159
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 764ee90e3b340b31-OSL
jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
200 OK 62 kB URL HTTP/2 jino.ru/static/lib/fonts/ptsans-sub/ptsans-regular.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 61600, version 2.328\012- data
Hash 5d12c58fffdb5ac7fd41f05ee0180a8e
b147b184608a46e13bd50c9f7b2e9bede4eba085
84baa1b0c5914a65ef3b6049d5d06cd64c44eb35151e6558940d505b9c5ad8af
GET /static/lib/fonts/ptsans-sub/ptsans-regular.woff2 HTTP/1.1
Host: jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: application/octet-stream
date: Fri, 04 Nov 2022 17:01:13 GMT
etag: "6353aac8-f0a0"
expires: Sat, 04 Nov 2023 17:01:13 GMT
last-modified: Sat, 22 Oct 2022 08:33:12 GMT
server: nginx/1.10.3
content-length: 61600
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash d03912d23238a54a63e1fbf9b9815682
cbcc5cf72ac0d2e16b3fe20556fc0cd728674025
7dbeb8c1203b85072514939d00ce4e3b66178cf23ac45da17f3ca16d4bb7fcea
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 17:01:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 02 Nov 2022 21:40:41 GMT
Expires: Wed, 09 Nov 2022 21:40:40 GMT
Etag: "cbcc5cf72ac0d2e16b3fe20556fc0cd728674025"
Cache-Control: max-age=448166,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 764ee90e3cd2b512-OSL
mc.yandex.ru/metrika/watch.js
200 OK 58 kB URL HTTP/2 mc.yandex.ru/metrika/watch.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Hash 7b111c54e4ca74c6afb01dccb16a6011
4348abbb3e927a3d20291a71a5e019bbd93923a3
3ad93d272b1bd1296c76105a47276b028046efb94daf54f6b9bef537626a381c
GET /metrika/watch.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 57770
date: Fri, 04 Nov 2022 17:01:13 GMT
access-control-allow-origin: *
etag: "63575841-e1aa"
expires: Fri, 04 Nov 2022 18:01:13 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
cache.betweendigital.com/code/1x1.gif
200 OK 43 B URL HTTP/2 cache.betweendigital.com/code/1x1.gif
IP
ASN #204720 CDNetworks LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /code/1x1.gif HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: image/gif
content-length: 43
last-modified: Tue, 08 Oct 2019 15:27:01 GMT
etag: "5d9caac5-2b"
x-cdn-edge-cache: HIT
x-cdn-edge-id: 312
x-cdn-request-id: 16341a8130bcb67d6c8bd1174f767333
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: PzmCHBzw+caDpBuPxPDssg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lOpXLtqb7WvRbMiWaoI80JXkfDE=
ocsp.digicert.com/
200 OK 279 B IP
Hash 5571c3d3c06695037f2e8f981535f53d
cf890155564e5bcee0c47b59d15fe8fe151b3530
a13f4084031a5c183adf8952c636fe613f22162a2aa41e617e86a80ca248845e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2773
Cache-Control: max-age=89499
Content-Type: application/ocsp-response
Date: Fri, 04 Nov 2022 17:01:13 GMT
Etag: "6363f51f-117"
Expires: Sat, 05 Nov 2022 17:52:52 GMT
Last-Modified: Thu, 03 Nov 2022 17:06:39 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.sectigo.com/
200 OK 472 B IP
Hash fd26af071b3ff5bc99c75632fdabd8ae
660532b794c4eb98d9ab6ca7b8fb6bcfa4ea55dc
81fd42ea092de1a9f7f317e9480a4551a0c0210eb2f8c21a7cec559bef5ce17d
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 17:01:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 04 Nov 2022 16:09:20 GMT
Expires: Fri, 11 Nov 2022 16:09:19 GMT
Etag: "660532b794c4eb98d9ab6ca7b8fb6bcfa4ea55dc"
Cache-Control: max-age=601085,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 764ee9102ed3b512-OSL
pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
200 OK 1.6 kB URL HTTP/2 pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
IP
File type ASCII text, with very long lines (3553)
Hash 2cf0e76f8c42b71535783c61d51156df
94ce2042927b2aa2f472672adadc7e5ffab3e78e
da941f235eeb36d3165129dfc2a25271aca37f763ebc568cb9586cf2704f1689
GET /fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon= HTTP/1.1
Host: pixel.yabidos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: application/javascript
content-length: 1597
last-modified: Wed, 12 Oct 2022 22:47:42 GMT
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 3121
expires: Fri, 04 Nov 2022 19:01:13 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
server: cloudflare
cf-ray: 764ee910a9ee0b3d-OSL
X-Firefox-Spdy: h2
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=8997586756240472&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
302 Found 0 B URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=8997586756240472&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=8997586756240472&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU=&tagType=adi&w=728&h=90&s=266562&jst=ai HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: /adi?frl=0&pos=atf&tz=0&fl=0&ord=8997586756240472&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
tuuid=f06f7b2e-27aa-5234-bc1f-b50bdf7af052; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VFWQAKoqgh4IASU2P8OGXe28S-m_-cw9BHzQ==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
content-length: 0
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash 1ce0c23384080b6baea075ec56707f64
5a74c7bb7be9e14376144f93327947f47a8dc4df
0d963c5ec2068f9aaaa1010097e3970997d91b0fdd7e4c109d83bcc6ef7eebc7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 04 Nov 2022 17:01:13 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Tue, 08 Nov 2022 15:09:30 GMT
ETag: "5a74c7bb7be9e14376144f93327947f47a8dc4df"
Last-Modified: Fri, 04 Nov 2022 15:09:31 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 819
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 764ee910cd4b0b31-OSL
pre.glotgrx.com/impimg.gif?cb=1667581272619&qid=53532313f523632313f5436393&cid=964&s=https://freesoftrus.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&ai=&flsrc=1
200 OK 26 B URL HTTP/2 pre.glotgrx.com/impimg.gif?cb=1667581272619&qid=53532313f523632313f5436393&cid=964&s=https://freesoftrus.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&ai=&flsrc=1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 6a43099d5c8fe991a7aa7ebaca53069d
5bce2f0d57305c58c7b05bfce29ebb39a18f5570
3b7b8a4b411ddf8db9bacc2f3aabf406f8e4c0c087829b336ca331c40adfdff1
GET /impimg.gif?cb=1667581272619&qid=53532313f523632313f5436393&cid=964&s=https://freesoftrus.ru&p=BX&x=&adtg=266562&nsi=&si=&nci=&nai=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&ai=&flsrc=1 HTTP/1.1
Host: pre.glotgrx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: image/gif
content-length: 26
last-modified: Wed, 12 Oct 2022 01:08:32 GMT
cf-cache-status: HIT
age: 3632
expires: Fri, 04 Nov 2022 19:01:13 GMT
cache-control: public, max-age=7200
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 764ee910ea310b3d-OSL
X-Firefox-Spdy: h2
www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/19495929
302 Found 0 B URL HTTP/2 www.tns-counter.ru/V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/19495929
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /V13a****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/19495929 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: ms-counter-3.3.5/1.20.2
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: image/gif
content-length: 0
location: https://www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/19495929
set-cookie: guid=B583013C63654559X1667581273; domain=tns-counter.ru; path=/; Max-Age=31536000; SameSite=None; Secure
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
strict-transport-security: max-age=2678400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 04 Nov 2022 17:01:13 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Fri, 04 Nov 2022 18:01:13 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25328195/1?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1174%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A99447389%3Arqn%3A1%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C53%2C0%2C698%2C0%2C%2C465%2C2%2C%2C%2C%2C1224%3Ans%3A1667581270758%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581273%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/25328195/1?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1174%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A99447389%3Arqn%3A1%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C53%2C0%2C698%2C0%2C%2C465%2C2%2C%2C%2C%2C1224%3Ans%3A1667581270758%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581273%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash d1c003771d20791e468c5ded7239a6a2
842217d77455632d00759928f9ddf1545f493d7d
5b25454214ab7409dd26ff1a47f18d96201525a8a372a9640fc3278f084e3dd3
GET /watch/25328195/1?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1174%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A99447389%3Arqn%3A1%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C53%2C0%2C698%2C0%2C%2C465%2C2%2C%2C%2C%2C1224%3Ans%3A1667581270758%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581273%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freesoftrus.ru
Referer: https://freesoftrus.ru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Fri, 04 Nov 2022 17:01:13 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://freesoftrus.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 04-Nov-2022 17:01:13 GMT
last-modified: Fri, 04-Nov-2022 17:01:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/19495929
200 OK 43 B URL HTTP/2 www.tns-counter.ru/V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/19495929
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /V13b****betweenx_ru/ru/CP1251/tmsec=betweenx_bx-ban-1/19495929 HTTP/1.1
Host: www.tns-counter.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: ms-counter-3.3.5/1.20.2
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate
timing-allow-origin: *
X-Firefox-Spdy: h2
ads.betweendigital.com/js?en=anNfcnVu&context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&tld=ZnJlZXNvZnRydXMucnU=
200 OK 68 B URL HTTP/2 ads.betweendigital.com/js?en=anNfcnVu&context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&tld=ZnJlZXNvZnRydXMucnU=
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /js?en=anNfcnVu&context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&tld=ZnJlZXNvZnRydXMucnU= HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
tuuid=3b017d81-553f-5234-b1d8-433fd2bd0666; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VFWQAMTHCHu5IEJE8yKqrVorSMdsAwRyg3ng==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a370a39f45ca0f8e93635801c8f920
eda5561283d9c750ef1ee54b838c5867aab86ad1
e79151ef032901281b74f54d7fe51d0b980b61c3b51c4a54cccd6e96992ddc29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E79151EF032901281B74F54D7FE51D0B980B61C3B51C4A54CCCD6E96992DDC29"
Last-Modified: Thu, 03 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3859
Expires: Fri, 04 Nov 2022 18:05:32 GMT
Date: Fri, 04 Nov 2022 17:01:13 GMT
Connection: keep-alive
mc.yandex.ru/watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&ut=noindex&hittoken=1667581273_d8733a0fb0a44730e8663e86338bed8ffa611fda1e3a8634bbba2ef3cb3e2f19&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A998551148%3Arqn%3A2%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1667581270758%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667581273&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&ut=noindex&hittoken=1667581273_d8733a0fb0a44730e8663e86338bed8ffa611fda1e3a8634bbba2ef3cb3e2f19&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A998551148%3Arqn%3A2%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1667581270758%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667581273&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/25328195/1?page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&ut=noindex&hittoken=1667581273_d8733a0fb0a44730e8663e86338bed8ffa611fda1e3a8634bbba2ef3cb3e2f19&browser-info=pa%3A1%3Aar%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A998551148%3Arqn%3A2%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1667581270758%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1667581273&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 48
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 04 Nov 2022 17:01:13 GMT
access-control-allow-origin: https://freesoftrus.ru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 04-Nov-2022 17:01:13 GMT
last-modified: Fri, 04-Nov-2022 17:01:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=8997586756240472&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
200 OK 21 kB URL HTTP/2 ads.betweendigital.com/adi?frl=0&pos=atf&tz=0&fl=0&ord=8997586756240472&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1
IP
Hash 5a7ed8e9378afc068000eec2cb7b9ee5
50d90713a0edcf00226307a9740cc115759d1a32
3836453f2ecb29526a7d166feaaa5cde39853ad92e4b6d9b37b248b864cc5dd4
GET /adi?frl=0&pos=atf&tz=0&fl=0&ord=8997586756240472&rr=direct&foc=1&r_seq=0&tld=ZnJlZXNvZnRydXMucnU%3D&tagType=adi&w=728&h=90&s=266562&jst=ai&crf=1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://freesoftrus.ru/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
tuuid=fb2ff2f5-0384-5234-a8cb-7d5fcbae3806; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VFWQALQtDgKEoz1S2KdyK2HrjdiYWUxDLHrA==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:13 GMT; Path=/; Domain=.betweendigital.com
content-encoding: gzip
vary: Accept-Encoding
X-Firefox-Spdy: h2
ads.betweendigital.com/view?context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&event=omo
200 OK 68 B URL HTTP/2 ads.betweendigital.com/view?context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&event=omo
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /view?context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&event=omo HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:14 GMT; Path=/; Domain=.betweendigital.com
tuuid=a1e97e37-2a31-5234-a236-272cc1536276; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:14 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VFWgABeuhOUCzbKLODjvWaj4a6YCqfKPNr_Q==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:14 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9873
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 17:01:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9873
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 17:01:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9873
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 17:01:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9873
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 17:01:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f6ae0db60213bfddbf2ad71a9fb116bf
915d2895adc3f022c28cc628aeb6e441cbb09d47
ac94f3fd00f0f8f8617d15a3816b07d25d3774e91b287ac181e5efb4ebf95e22
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC94F3FD00F0F8F8617D15A3816B07D25D3774E91B287AC181E5EFB4EBF95E22"
Last-Modified: Thu, 03 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9873
Expires: Fri, 04 Nov 2022 19:45:47 GMT
Date: Fri, 04 Nov 2022 17:01:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98808735-da09-4166-b898-eee474b2aed2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98808735-da09-4166-b898-eee474b2aed2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c472942cb4b85610a3e83edf7527f923
8191eb019b21bed2b9f53c755e1c24d08dc70760
0dc7f9902567b0130c1c34b6e356b8239f8e6c83e1d38ac9b74588270000279c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98808735-da09-4166-b898-eee474b2aed2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10810
x-amzn-requestid: 85c9096f-2671-4f0e-94a3-607254d036d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC057E5yIAMFcXw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364350c-3c93b6e56e6141a63d1285eb;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:39:24 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: i3Kso77aQ6Qt3z3KH189niLwWzWFJz7Y0aMQngNRahdqlMAo76WksQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:52:42 GMT
age: 68912
etag: "8191eb019b21bed2b9f53c755e1c24d08dc70760"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ae2b8d827fb2c8bef64febcd36f1645
f7705fcd2d91ce90c58e79324cce1e3abba6c1c8
2dc55e97ef3a85fccb104b80161a8bac16b12d37527c336563677432584c7ad5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3494b1e3-ddc8-454c-8b43-e70e2d8f07b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11421
x-amzn-requestid: 8436166b-f342-44e9-9a31-e25dcaa7b85c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a2gEOEYRIAMFQ2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635f46e7-0616a6b95503fffd4f597509;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 03:54:15 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: g3OtcJnT2JfzIAvUjoLvC8pOzfwGFQ-M0cH4uwNSVcr2T9jYgCihTw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 23:36:56 GMT
age: 62658
etag: "f7705fcd2d91ce90c58e79324cce1e3abba6c1c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cdc7f46-586b-486f-968f-5fe03bbb41a9.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cdc7f46-586b-486f-968f-5fe03bbb41a9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae1ac87f2e6534322ba259d6e06fcaa5
c721a00ae618e6ed997e102fa3d977ef830cac05
2f4cab8b925f6a79ed96b08edc00f04186d33ed9cfd4ba565884a931e83ae408
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1cdc7f46-586b-486f-968f-5fe03bbb41a9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7601
x-amzn-requestid: bec1a71e-c5bd-4332-ac60-18b49304a5a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: a275aEHYoAMFwlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635f736f-1b36c60a43415790430fbecf;Sampled=0
x-amzn-remapped-date: Mon, 31 Oct 2022 07:04:15 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MORvkZWLXGvSFYxjnSiYJluJY302y_FTvACRUrEvo7vLYkheyEcE1g==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Fri, 04 Nov 2022 07:18:27 GMT
age: 34967
etag: "c721a00ae618e6ed997e102fa3d977ef830cac05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08eaa5d0-649d-4568-ac8b-ca60d91ab718.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08eaa5d0-649d-4568-ac8b-ca60d91ab718.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9a763d44e05fa357713a41ab1388974a
d4d2ee1aa9beb5bbd19aaaf590c8a0832fb180cd
f351b7e90e5435af071892b62af3ac591bc553281b3ea63b1ae067a3d03f572d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F08eaa5d0-649d-4568-ac8b-ca60d91ab718.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7703
x-amzn-requestid: 4f835957-6df6-4001-9c34-ed9749000b46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC0RpFGwoAMF0-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364340a-3f7b7dd36cb07d057b64ec2f;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:06 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DknsakNef7SUQhERTPiLozTDA4tl1OEdE8ohicMEfVGvwaLwPX8d_Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:54:49 GMT
age: 68785
etag: "d4d2ee1aa9beb5bbd19aaaf590c8a0832fb180cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a631333-54a4-458c-b54b-2dd96d4ede5a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a631333-54a4-458c-b54b-2dd96d4ede5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5aedde5b1d003651d773c89833460868
29ca25963b777fd7463c65d8cde6d65172c996e1
04b95b954d7d992e6547d05d052c6f3f8a4cfb4a5988f9e6c6629969053bf7b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a631333-54a4-458c-b54b-2dd96d4ede5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11188
x-amzn-requestid: 72e0a128-e0c4-4a93-8e29-01a574b2d1c3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC0XNHPcoAMFkNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6364342d-341a40d37b7bcc9153749d67;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:35:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eo3FBGjoivBN1-4xP1UiTocKbLd87acRtOX2AQrPr1a4yDboDrXYRA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:53:38 GMT
age: 68856
etag: "29ca25963b777fd7463c65d8cde6d65172c996e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ca6c7517d7015fbc35fa290c1c2d6afd
594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c
a746b36be50209915a0e5657abd219aab382eee4b7556142aa1316daf3a9f5a4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d05e3a2-b178-419f-90de-a1985765ff09.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: f2e39db1-fb8a-4a9b-8a1d-ee08000ddeb6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bC1VyFHuIAMF5Eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636435be-7a03ef677f8dbd680f72de90;Sampled=0
x-amzn-remapped-date: Thu, 03 Nov 2022 21:42:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OI-hzSDTy-vFSFOZxI98XT8VZmnpFlU_cobzCTkrn4T5NuH8cqybMg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 03 Nov 2022 21:52:32 GMT
age: 68922
etag: "594e5a82ce82fb4cd76548b6d2d6b4cc419b7e4c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ads.betweendigital.com/view?context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1
200 OK 68 B URL HTTP/2 ads.betweendigital.com/view?context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash c4a2b870062c2bb98c500bc1526c0498
528666ccdb12997358077bc8fcdbfb6b825c7788
2aa4fa20701cdd6d8d56046069001186b5267e3ee7d0ef618ad2f4a683723e11
GET /view?context=AAAAAJateXthdgACdwA0AtVTvW7UQBC2B-sUhVNAUQoKCguBBRLn2_Xf2YmsoBABQkoORYmI0px89jpnYuxjd3OXpIqooKOABlFQUyGEQBThAdJwdFQ8AwUPwPp-ktMJ0aVgvB57vp3dnflmFu45pmG6TSusOK7hVaw4aFaapmFXYhJGmBDbtJoe4A-v3n0qv3z9-cuzYKqTkK4kwc0W5202X63GlBCWx5zuMp3ugv53vAqXPKx7SLcMHdsWvJVX8oMkTYOqrSP1-sMki_IuU1fXVYx0tKAKwLEW1L1C0c48RsLthnqXhDt51UAYiYHVOwklcb5X7c_CtGkhq3bysWuu6UDZcBzbMeD9efgogwQKgNASXJ4IW4JZSjoN1gooAUADr0IKDQpGMIWw0MpqHabqLM1BQWbhqJAM5k7DB8Aws0zYDs_bMF3nLUL7-8Bc70Xv6PvT3tfe0WhbCUq3H6xA34CfMCIuiJjeJLxLSBYl2wkPUj3MHws4WYxp6iOtnTM_4LHGD4QRF0hOI9_1vJrtOjWRbUGAoVHqR4KgkGtxHvpYow1Gnghnnkb-VnY_3dpc7Wxla_vR5spumG1cM5c1Hmyv77eJL87Sun7NcLWW7yGN-QMWtUeM-0GihTT2sSDoYhykaTMIdwStBallbDiuY0p99vrvME9pmOTMsGJQEiXrzwxIHnL9P8mvxXFrMn5hHy6OYHmYJ1x9I90SP9aSwGBsjVx4nPX9OFakyVOKs4-V0trG0mR2cCXP0iQjjaTdaOWMJ9k2SPCPMsm_z414kcuicfY8VJqVD58fDFd9u1CMgcyOkQY_lEGLyKJh5NOJ08t3EpIiHlkaF-WkFiP8Dw==&jsp=rsize%3D728x90%26tld%3DZnJlZXNvZnRydXMucnU%3D%26utbo%3D-00%3A00%26fstc%3D-1 HTTP/1.1
Host: ads.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
cache-control: no-cache, no-store, max-age=0, must-revalidate
set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:14 GMT; Path=/; Domain=.betweendigital.com
tuuid=4d4d1e51-6d44-5234-963d-4303f5580659; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:14 GMT; Path=/; Domain=.betweendigital.com
ut=Y2VFWgANgQjq57lcXnJLnX4Qh18cE-uNOa4KoA==; Max-Age=31536000; Expires=Sat, 04 Nov 2023 17:01:14 GMT; Path=/; Domain=.betweendigital.com
content-length: 68
X-Firefox-Spdy: h2
pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
301 Moved Permanently 0 B URL HTTP/2 pixel.yabidos.com/fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
IP
GET /fltiu.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon= HTTP/1.1
Host: pixel.yabidos.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 04 Nov 2022 17:01:13 GMT
location: https://pixel.yabidos.com/fltiukqt.js?qid=53532313f523632313f5436393&cid=964&p=BX&s=https://freesoftrus.ru&x=&nci=&adtg=266562&nai=&si=&pn=&h=&w=&bp=&pp=&ci=&ip=&ai=&di=&mm=&os=&ua=&lat=&lon=
cache-control: max-age=3600
expires: Fri, 04 Nov 2022 18:01:13 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 764ee90fd9400b3d-OSL
X-Firefox-Spdy: h2
mc.yandex.ru/watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1174%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A99447389%3Arqn%3A1%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C53%2C0%2C698%2C0%2C%2C465%2C2%2C%2C%2C%2C1224%3Ans%3A1667581270758%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581273%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1174%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A99447389%3Arqn%3A1%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C53%2C0%2C698%2C0%2C%2C465%2C2%2C%2C%2C%2C1224%3Ans%3A1667581270758%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581273%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/25328195?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1174%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A99447389%3Arqn%3A1%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C53%2C0%2C698%2C0%2C%2C465%2C2%2C%2C%2C%2C1224%3Ans%3A1667581270758%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581273%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://freesoftrus.ru
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/25328195/1?wmode=7&page-url=https%3A%2F%2Ffreesoftrus.ru%2FSoft%2Fccleaner_professional_4.15.4725.zip&charset=utf-8&site-info=%7B%22page%22%3A%22404%22%2C%22jsVersion%22%3A%221.42.3%22%2C%22htmlVersion%22%3Anull%7D&ut=noindex&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aeaydspl3nlyays9y07x84%3Afp%3A1174%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A1019218525240%3Ahid%3A1025412243%3Az%3A0%3Ai%3A20221104170112%3Aet%3A1667581273%3Ac%3A1%3Arn%3A99447389%3Arqn%3A1%3Au%3A1667581273842860211%3Aw%3A1280x939%3As%3A1280x1024x24%3Ask%3A1%3Ads%3A0%2C0%2C53%2C0%2C698%2C0%2C%2C465%2C2%2C%2C%2C%2C1224%3Ans%3A1667581270758%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1667581273%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%20404.%20%D0%A4%D0%B0%D0%B9%D0%BB%20%D0%BD%D0%B5%20%D0%BD%D0%B0%D0%B9%D0%B4%D0%B5%D0%BD&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Fri, 04 Nov 2022 17:01:13 GMT
access-control-allow-origin: https://freesoftrus.ru
set-cookie: yandexuid=6860437141667581273; Expires=Sat, 04-Nov-2023 17:01:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=6860437141667581273; Expires=Sat, 04-Nov-2023 17:01:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1618827271667581273; Path=/; SameSite=None; Secure
i=NGzseN6beuonA2NONAveNAWgbWawvqchxp0ORePRs0IyH+7wd0Ql8UUo2s2VNH9hX+DO/sygrYBWi8VXjrtDpl58/aE=; Expires=Mon, 01-Nov-2032 17:01:12 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1699117273.yrts.1667581273#1699117273.yrtsi.1667581273; Expires=Sat, 04-Nov-2023 17:01:13 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 04-Nov-2022 17:01:13 GMT
last-modified: Fri, 04-Nov-2022 17:01:13 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
parking-static.jino.ru/static/main.js
200 OK 0 B URL HTTP/2 parking-static.jino.ru/static/main.js
IP
GET /static/main.js HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 04 Nov 2022 17:01:12 GMT
content-type: application/javascript
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1dc09d84-1b7f3"
content-encoding: gzip
X-Firefox-Spdy: h2
parking-static.jino.ru/static/components/page/logo.svg
200 OK 0 B URL HTTP/2 parking-static.jino.ru/static/components/page/logo.svg
IP
GET /static/components/page/logo.svg HTTP/1.1
Host: parking-static.jino.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.20.0
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: image/svg+xml
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"1dc09d84-a26"
content-encoding: gzip
X-Firefox-Spdy: h2
cache.betweendigital.com/sections/2/266562.js
200 OK 0 B URL HTTP/2 cache.betweendigital.com/sections/2/266562.js
IP
ASN #204720 CDNetworks LLC
GET /sections/2/266562.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: application/javascript
last-modified: Fri, 04 Oct 2019 08:41:04 GMT
etag: W/"5d9705a0-2176"
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 312
x-cdn-request-id: ab0abbaa5326e3c2249debbac1ad784a
X-Firefox-Spdy: h2
cache.betweendigital.com/code/async_rtb.js
200 OK 0 B URL HTTP/2 cache.betweendigital.com/code/async_rtb.js
IP
ASN #204720 CDNetworks LLC
GET /code/async_rtb.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://freesoftrus.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 20:57:41 GMT
etag: W/"63375845-4cea3"
cache-control: public, max-age=7200, immutable
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 312
x-cdn-request-id: 46ec2b9d99755f36764a4754215ffcae
X-Firefox-Spdy: h2
cache.betweendigital.com/pmListener.js
200 OK 0 B URL HTTP/2 cache.betweendigital.com/pmListener.js
IP
ASN #204720 CDNetworks LLC
GET /pmListener.js HTTP/1.1
Host: cache.betweendigital.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ads.betweendigital.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 04 Nov 2022 17:01:13 GMT
content-type: application/javascript
last-modified: Wed, 03 Feb 2021 14:20:14 GMT
etag: W/"601ab11e-caf"
content-encoding: gzip
x-cdn-edge-cache: HIT
x-cdn-edge-id: 312
x-cdn-request-id: f86556845b138d8950126b44d927115d
X-Firefox-Spdy: h2
81.177.140.243
23.36.77.32
104.18.21.226
52.39.126.109
188.42.191.196
93.184.220.29