firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 21:36:20 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -ciD2oTRCi5sRaclFwjOAvFl47lJKl02naGZkxuj3ynIYT-DTbA5Rg==
Age: 3138
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10926
Expires: Sat, 03 Sep 2022 01:30:44 GMT
Date: Fri, 02 Sep 2022 22:28:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sVC0hddWbX9qakWDFKhx_Lh62L7ku5CGtW2oiF58Sfz2yJeLj3DdvQ==
age: 76401
X-Firefox-Spdy: h2
kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
200 OK 2.9 kB URL HTTP/1.1 kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ISO-8859 text, with very long lines (605), with CRLF, LF line terminators
Hash 4fd302855ee5dfa34ff10bf5667d2327
6c3c12e2bfb69757bf9b618048c97233b289508e
ee80b4e8c899b654294a0147cc5fb4f36d5fb013afb46da811b5323fce050664
GET /recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?? HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 2939
Content-Type: text/html
Content-Encoding: gzip
Vary: Accept-Encoding
Server:
Set-Cookie: lang=ru; path=/
ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; path=/
ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e;Path=/;Domain=kushaem.com
WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; Path=/; HttpOnly
BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==; path=/
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 22:28:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/show_ads.js
200 OK 40 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/show_ads.js
IP
File type ASCII text, with very long lines (2302)
Hash 3e42b1132dfbe7a218442a884678bf6c
587678fcb8275eeab2d36beb13eefe9103d920d2
d31ce0f1a4c5bdaa99d341e957e1dc08bc166ac92c2577679a76626eca440adb
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Fri, 02 Sep 2022 22:28:38 GMT
Expires: Fri, 02 Sep 2022 22:28:38 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 2991728357342325374
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 40127
X-XSS-Protection: 0
kushaem.com/css/main.css
200 OK 739 B IP
File type ASCII text, with CRLF line terminators
Hash bb6519f4075d1b1d5706c5e4e1a284a4
f6b7bd97e18e2ba55250e6e6f6b181e1086be7b5
90ef32ef3f74a9ca784a825b821fc5f429e3615986e215d2ade8d92bfa3a6424
GET /css/main.css HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 739
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 28 Aug 2016 15:35:46 GMT
Accept-Ranges: bytes
ETag: "58fed9d8411d21:0"
Vary: Accept-Encoding
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/css/structure.css
200 OK 2.4 kB URL HTTP/1.1 kushaem.com/css/structure.css
IP
File type ASCII text, with CRLF line terminators
Hash 6b7f5ef6ac653c1cb01e3b5168d3170c
59f54a599d019f5bfcce956b7c6afbf63ccbecd6
2470a0f59477c0e0b6298a8a7ab8cf7fc71c2617f89a39e7a4c8e3430f7ec9d8
GET /css/structure.css HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 2377
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 28 Aug 2016 15:35:47 GMT
Accept-Ranges: bytes
ETag: "6ac28d9411d21:0"
Vary: Accept-Encoding
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 02 Sep 2022 21:38:16 GMT
Cache-Control: max-age=3600
Expires: Fri, 02 Sep 2022 22:21:50 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rzHHvMYGqZDqWa1MycVgKMAomDRa2mafDKMmAOEga9S3fjYe6-AODA==
Age: 3022
kushaem.com/js/common.js
200 OK 1.4 kB IP
File type ASCII text, with CRLF line terminators
Hash 1a32d8c1953481844e5d2495295c9891
00ea33bad7e1aa2614a6936b8705b7b0923a850b
0841ba4c87f5cc131a5b28ef3c12e03d6caf132872288f06cf5660c3d32ceecf
Analyzer Verdict Alert fortinet Malware
GET /js/common.js HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 1416
Content-Type: application/x-javascript
Content-Encoding: gzip
Last-Modified: Sun, 28 Aug 2016 15:36:16 GMT
Accept-Ranges: bytes
ETag: "245d31ea411d21:0"
Vary: Accept-Encoding
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/css/basestyle.css
200 OK 430 B URL HTTP/1.1 kushaem.com/css/basestyle.css
IP
File type ASCII text, with CRLF line terminators
Hash ce0602780231a1ab074f33d5c20f6323
5364714dfd9b5572dba40cbb7b9e36a955ace259
feb86fa8e6cde0595e96555baeed3ad506298f38f75353d13ae9dbca5b103bc8
GET /css/basestyle.css HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 430
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 28 Aug 2016 15:35:46 GMT
Accept-Ranges: bytes
ETag: "c99e99d8411d21:0"
Vary: Accept-Encoding
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
www.russiantable.com/store/affiliate/showban.asp?id=4500&img=
403 Forbidden 2.5 kB URL HTTP/1.1 www.russiantable.com/store/affiliate/showban.asp?id=4500&img=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1490)
Hash f130176a8939944ef6d9e261d7e71b54
342d3af9a8cb82170cef29130d3fe2441cf91465
92a43d59ac37be3d4e7fdf43ff197762b9822fe17a398df1b1f921a04b2e4357
GET /store/affiliate/showban.asp?id=4500&img= HTTP/1.1
Host: www.russiantable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/
HTTP/1.1 403 Forbidden
Date: Fri, 02 Sep 2022 22:28:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UHV2NKmmrxu78O%2BeyoI%2Bh5Y%2Bzol9KIaGJ4usSFSvn7uTbRNAhdbHTPUbXtb5DkSRIOmo%2FIQipM02may0wmEA1bHlzz4d2ndr6yLelHF1d641WgWZRfTMiDageCzdIFSNIKgUJTqOrA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7449ae0edb4b0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.russiantable.com/store/affiliate/showban2.asp?id=4500&img=167x250/russiantable_167x250_07.gif&emp_cat=Banners%20%20167?250
403 Forbidden 2.5 kB URL HTTP/1.1 www.russiantable.com/store/affiliate/showban2.asp?id=4500&img=167x250/russiantable_167x250_07.gif&emp_cat=Banners%20%20167?250
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1578)
Hash d32ab4acc20ec9a282dbb211a2577702
70890708ba810df9ae748656a02177aace415dad
792a963e979b5ba483e5b67ee96e1e1b3fdce59f02ae41b5af3bc56196df91da
GET /store/affiliate/showban2.asp?id=4500&img=167x250/russiantable_167x250_07.gif&emp_cat=Banners%20%20167?250 HTTP/1.1
Host: www.russiantable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/
HTTP/1.1 403 Forbidden
Date: Fri, 02 Sep 2022 22:28:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w1wurO1hPjcbU9d2LfBykTjxO0YGMEXm5fRm%2BLjukntV6Zk%2F%2F3UwFBFYqI9v3bTCuUU6dNaGnzixBErz91phzvkSntxLL5oIDICZdjUYqtfygPHM7QyJJQRoYyxFsXCUFVk5wJnkEA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7449ae0edbeb0b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
kushaem.com/js/comments.js
404 Not Found 4.8 kB URL HTTP/1.1 kushaem.com/js/comments.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (365)
Hash 8959473c329c5ec7f8db7098c0dd1290
32a1e06adc6e439e95578ad35f3e9697955d1b82
4667b6ab20a14aec9e91f99a33ea4be5aa3611ca1f852d3849757f368226b8de
Analyzer Verdict Alert fortinet Malware
GET /js/comments.js HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Length: 4848
Content-Type: text/html; charset=utf-8
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/img/icon_search.png
200 OK 2.3 kB URL HTTP/1.1 kushaem.com/img/icon_search.png
IP
File type PNG image data, 36 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 7d34ec9b8d1d1bad096147adafca879b
ff763e2d62df50c944dea257dac1f8cc6f3f679b
bad31292efd85d491a53c3597ef86f4c68edb0a92166b0cf262f6981133254b4
GET /img/icon_search.png HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 2284
Content-Type: image/png
Last-Modified: Sun, 28 Aug 2016 15:36:07 GMT
Accept-Ranges: bytes
ETag: "d13257e5411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
www.russiantable.com/store/affiliate/showban2.asp?id=4500&img=167x250/russiantable_167x250_07.gif&emp_cat=Banners%20%20167?250
403 Forbidden 2.5 kB URL HTTP/1.1 www.russiantable.com/store/affiliate/showban2.asp?id=4500&img=167x250/russiantable_167x250_07.gif&emp_cat=Banners%20%20167?250
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1578)
Hash f1eb5f78201b42d2cb30d6bd432ecdf1
646ed7a34234afc0c9593ac3edc9a82fb6791b01
12909c2b4763654c99bf7cd36bfae69be19b93381de1bc36199d410fbb22b7a9
GET /store/affiliate/showban2.asp?id=4500&img=167x250/russiantable_167x250_07.gif&emp_cat=Banners%20%20167?250 HTTP/1.1
Host: www.russiantable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/
HTTP/1.1 403 Forbidden
Date: Fri, 02 Sep 2022 22:28:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2akyB00oWKqrNHyWcsj%2B8K5MbxK5bn6QM8DHnWpLd85xxP2grk4KOAhELfp3yhNDyv75daesU%2BVHYIcqKaJe5xOwAG2GXaEaRQGSm1%2FKjzY7EfEX4PjK5dgJoGTWNiuzMsVziijSmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7449ae0fcc3f0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
kushaem.com/img/logo.png
200 OK 2.0 kB IP
File type PNG image data, 260 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 5cd454598835fc0a28355a71cbf7be90
01f2c173d6a3f2fc95545f4aadbc84c2a59454ab
75f6c316c8dfd0cef45aaf6b4d55320849aa702ae2ac1c45a59253b9de33790e
GET /img/logo.png HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 1968
Content-Type: image/png
Last-Modified: Sun, 28 Aug 2016 15:36:08 GMT
Accept-Ranges: bytes
ETag: "5c9297e5411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
www.russiantable.com/store/affiliate/showban.asp?id=4500&img=
403 Forbidden 2.4 kB URL HTTP/1.1 www.russiantable.com/store/affiliate/showban.asp?id=4500&img=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1490)
Hash 1f8b775082d85d606c2f05c3682c3413
cac874e4803063b18bdb7bf7bc15d86f63e5065f
a964895f601df8596e398315aab222fa4ab1e7e13c9f21777d5de7ffc3aa1248
GET /store/affiliate/showban.asp?id=4500&img= HTTP/1.1
Host: www.russiantable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/
HTTP/1.1 403 Forbidden
Date: Fri, 02 Sep 2022 22:28:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j4zDRycbzhUzR8twdobRsOgHQRii8GNEohxuotigSfoOj1QpC1PjUg5zjTO6J8Xci6Y4DewcANaLavCwmLjTt9im2HTrRu7DnZzwQbgsihP2wssDUCDMEGKBmqqXZwGYyhUAoJ5I0w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7449ae0fdc6e0b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 21daf45cdda2eb462873226bb5c1f0fb
4d4621bbf1461f35f7e536c1dbd9de71978ffa23
8164c742d013bdc2836cac1167acfe482547347ab6a1daefa15475f694dae057
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6433
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Last-Modified: Fri, 02 Sep 2022 20:41:26 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
kushaem.com/img/cnt_bg.png
200 OK 219 B URL HTTP/1.1 kushaem.com/img/cnt_bg.png
IP
File type PNG image data, 550 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 561e1e7c88fda479da2d223d276ee94d
812dedaefb8d877edc0069cbc911c274b005184f
200f504b6a8a38b287302a3412e3fe32ff4271fd56775aa3c6520366713ab80c
GET /img/cnt_bg.png HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 219
Content-Type: image/png
Last-Modified: Sun, 28 Aug 2016 15:35:55 GMT
Accept-Ranges: bytes
ETag: "a611fedd411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/img/cnt_top.png
200 OK 1.0 kB URL HTTP/1.1 kushaem.com/img/cnt_top.png
IP
File type PNG image data, 550 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash e9fc559ff8a88de8a13374779e3952bf
1d3f6db70276bfbe365215545c1ca8d44c82aac6
5cc3055ff8c1d639cbc601514cf0a333c0404eb501a1dd54e3fa3a7f63f21674
GET /img/cnt_top.png HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 1026
Content-Type: image/png
Last-Modified: Sun, 28 Aug 2016 15:35:56 GMT
Accept-Ranges: bytes
ETag: "d6e3cde411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
www.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Fri, 02 Sep 2022 21:04:40 GMT
Expires: Fri, 02 Sep 2022 23:04:40 GMT
Cache-Control: public, max-age=7200
Age: 5039
Last-Modified: Wed, 13 Apr 2022 21:02:38 GMT
Content-Type: text/javascript
kushaem.com/img/c_sm_top.gif
200 OK 4.6 kB URL HTTP/1.1 kushaem.com/img/c_sm_top.gif
IP
File type GIF image data, version 89a, 218 x 1000\012- data
Hash b5db151a701edb0a62d18d871e0889ea
633eef17ee494ffb756e58d8312af4e576fcd0c4
0fe8041ec934ffd1edc2b645eeb0b70230bdc0806a923179fda0ecf336426922
GET /img/c_sm_top.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 4609
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:58 GMT
Accept-Ranges: bytes
ETag: "84aec0df411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/img/arrow_blue.gif
200 OK 54 B URL HTTP/1.1 kushaem.com/img/arrow_blue.gif
IP
File type GIF image data, version 89a, 7 x 9\012- data
Hash c69ed3d6e18b6077d7c34e7f6ebb8f26
0232d4415737b3ec6832ca7d5166e823f174443f
b335fe1c83ee3d7845a77fc901ba8aab12346b5a6995c290efe7f20c5803f724
GET /img/arrow_blue.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 54
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:50 GMT
Accept-Ranges: bytes
ETag: "abbc1fdb411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/img/bg_contentfooter.gif
200 OK 7.1 kB URL HTTP/1.1 kushaem.com/img/bg_contentfooter.gif
IP
File type GIF image data, version 89a, 550 x 213\012- data
Hash bf52d41233e119c0e82e7e31af9587b4
441c6c348f4464fec76f820259ec90994e3816a9
6a5f6d67270df0e5670090f73168a3cea32ddaa4b60a312fa9d0f7914a82e7d6
GET /img/bg_contentfooter.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 7056
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:53 GMT
Accept-Ranges: bytes
ETag: "f97179dc411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/img/c_sm_bot.gif
200 OK 4.6 kB URL HTTP/1.1 kushaem.com/img/c_sm_bot.gif
IP
File type GIF image data, version 89a, 218 x 1000\012- data
Hash 4ad6c10375430de3605f10872c3d14d2
933bf9bc73880ce5776f879ab98fd9ffbde4cdf3
d1aaad87b8f29d8b6549670b74510878f026f41509d12f1697a8d2d28073c2bb
GET /img/c_sm_bot.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 4619
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:58 GMT
Accept-Ranges: bytes
ETag: "316374df411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/img/icon_heart.gif
200 OK 567 B URL HTTP/1.1 kushaem.com/img/icon_heart.gif
IP
File type GIF image data, version 89a, 14 x 12\012- data
Hash 8855d91b365c7f294b1a699b40332d6e
46a7b3cf0e0a6ca4d70cd37e27d8cd356e866a99
46af2d9881b90ff9e4fca902d31683f10738fea04cffb97107d37bf6e8ec8a86
GET /img/icon_heart.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 567
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:36:06 GMT
Accept-Ranges: bytes
ETag: "c9b193e4411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
kushaem.com/img/cnt_top_accent.png
200 OK 23 kB URL HTTP/1.1 kushaem.com/img/cnt_top_accent.png
IP
File type PNG image data, 526 x 97, 8-bit/color RGBA, non-interlaced\012- data
Hash d3efa0cfe98665752e921f8cfa8589c8
76b9e12bee90dbddb336216a1bd3d6b44e2002a6
8986b5a1ca9f874e029f0bb2fca0dc37687b26d1de05097a88563cae265b909a
GET /img/cnt_top_accent.png HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 22639
Content-Type: image/png
Last-Modified: Sun, 28 Aug 2016 15:35:56 GMT
Accept-Ranges: bytes
ETag: "a2a99de411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:38 GMT
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: J1RegqpLXYSPZ4yEI4VQNw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 33s/DP7hTVNQv4h1Zdw1oBFgpUU=
kushaem.com/img/icon_print.gif
200 OK 226 B URL HTTP/1.1 kushaem.com/img/icon_print.gif
IP
File type GIF image data, version 89a, 14 x 14\012- data
Hash dfccbb3b665895fe759c117701b8938e
2d5049ca739de519bf59f86c35b057a4024426e0
ccaea15d45cb60d2f9aa2a24eca8cebf3218339e0ce60a966901ca1239882385
GET /img/icon_print.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 226
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:36:07 GMT
Accept-Ranges: bytes
ETag: "6011d4e4411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
kushaem.com/img/logo_copyright.gif
200 OK 2.1 kB URL HTTP/1.1 kushaem.com/img/logo_copyright.gif
IP
File type GIF image data, version 89a, 169 x 22\012- data
Hash dd0511b748acf9530785feaf318c5d7a
d87aefb68912135dd4cf363c10a5993dea9c6a09
cb3f47cad1494754954d041dec4d4639c8ed0ad92e5fcdf0f44feaef6bb45187
GET /img/logo_copyright.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 2052
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:36:08 GMT
Accept-Ranges: bytes
ETag: "e7f1d7e5411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
kushaem.com/img/menu.png
200 OK 6.8 kB IP
File type PNG image data, 242 x 347, 8-bit/color RGBA, non-interlaced\012- data
Hash f760054a18181f1334466597f57cf848
360adbf495d3634655520f5cb6541980fe484250
5ccdb758856cbf0a86085887e7a9d0d3021de0002b3c91b01ddbf93050f85b11
GET /img/menu.png HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 6760
Content-Type: image/png
Last-Modified: Sun, 28 Aug 2016 15:36:09 GMT
Accept-Ranges: bytes
ETag: "9d9f26e6411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
kushaem.com/img/dots_hr.gif
200 OK 43 B URL HTTP/1.1 kushaem.com/img/dots_hr.gif
IP
File type GIF image data, version 89a, 3 x 1\012- data
Hash a2f8a4da03bda186cab6d2fa85758acf
6b3b9aee6ef1639d7ec29485021743c43b10de24
ffe635957fa69d591ab3667c4dc1376af172100a564ba6e2c6e8e5ad4a014f0b
GET /img/dots_hr.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/main.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 43
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:58 GMT
Accept-Ranges: bytes
ETag: "13e1e0411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
kushaem.com/img/arrow_menu_off.gif
200 OK 54 B URL HTTP/1.1 kushaem.com/img/arrow_menu_off.gif
IP
File type GIF image data, version 89a, 7 x 9\012- data
Hash c2610dad9772a33ed2701e4cf2615f69
c9e1b3e16f5e3498af7a717d587417ac2cc22e60
908463c930cddff197ded22f0f3f9b8b8c5e7dfbb90d09b624b5e17be677fef9
GET /img/arrow_menu_off.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/main.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 54
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:51 GMT
Accept-Ranges: bytes
ETag: "dfb95ddb411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
kushaem.com/img/btn_search.png
200 OK 911 B URL HTTP/1.1 kushaem.com/img/btn_search.png
IP
File type PNG image data, 46 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash 4368c17426bf76dfeb697ba3aff22827
96f12a5dce59dfb92aeacd5b66ea5794987062a9
62237791dc5cbde52b74713313810a889fc1a939b0e178ed9d91129d213b80be
GET /img/btn_search.png HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 911
Content-Type: image/png
Last-Modified: Sun, 28 Aug 2016 15:35:54 GMT
Accept-Ranges: bytes
ETag: "88527ddd411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
kushaem.com/img/arrow_white_reverse.gif
200 OK 54 B URL HTTP/1.1 kushaem.com/img/arrow_white_reverse.gif
IP
File type GIF image data, version 89a, 7 x 9\012- data
Hash d3d4d4d126bc37720fc4ada1b2a8cba0
864f234adaedce47a76606ba41ce6b5095888fdc
d9cb1530915137f17b1211dc2132cbced86b66528a6ff732e1b03324ae3595f6
GET /img/arrow_white_reverse.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 54
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:52 GMT
Accept-Ranges: bytes
ETag: "4bc42adc411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
kushaem.com/img/bg_header.gif
200 OK 763 B URL HTTP/1.1 kushaem.com/img/bg_header.gif
IP
File type GIF image data, version 89a, 4 x 132\012- data
Hash 3e0180b8c41e6c1367aea2c6ed3ee615
51a0f59e53b5ec2e552ef4dbbf76f5707bb795aa
8f362f4f1bba29414e1b889f5e6217e117ed880d189e4058d6973256767f1675
GET /img/bg_header.gif HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/css/structure.css
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==
HTTP/1.1 200 OK
Content-Length: 763
Content-Type: image/gif
Last-Modified: Sun, 28 Aug 2016 15:35:54 GMT
Accept-Ranges: bytes
ETag: "a2903add411d21:0"
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1866950074&utmhn=kushaem.com&utmcs=windows-1251&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=%D0%A1%D0%B0%D0%BB%D0%B0%D1%82%20%D0%B8%D0%B7%20%D0%BE%D1%82%D0%B2%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%B3%D0%BE%D0%B2%D1%8F%D0%B4%D0%B8%D0%BD%D1%8B*%20%3A%20kushaem.com&utmhid=747460706&utmr=-&utmp=%2Frecipe.asp%3Fid%3D316%26lang%3Dru%26name%3D%3F%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3F%3F&utmht=1662157717413&utmac=UA-469859-5&utmcc=__utma%3D58297008.413597691.1662157717.1662157717.1662157717.1%3B%2B__utmz%3D58297008.1662157717.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1802557331&utmredir=1&utmu=HAAAAAAAAAAAAAAAAAAAAAAE~
200 OK 35 B URL HTTP/1.1 www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1866950074&utmhn=kushaem.com&utmcs=windows-1251&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=%D0%A1%D0%B0%D0%BB%D0%B0%D1%82%20%D0%B8%D0%B7%20%D0%BE%D1%82%D0%B2%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%B3%D0%BE%D0%B2%D1%8F%D0%B4%D0%B8%D0%BD%D1%8B*%20%3A%20kushaem.com&utmhid=747460706&utmr=-&utmp=%2Frecipe.asp%3Fid%3D316%26lang%3Dru%26name%3D%3F%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3F%3F&utmht=1662157717413&utmac=UA-469859-5&utmcc=__utma%3D58297008.413597691.1662157717.1662157717.1662157717.1%3B%2B__utmz%3D58297008.1662157717.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1802557331&utmredir=1&utmu=HAAAAAAAAAAAAAAAAAAAAAAE~
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1866950074&utmhn=kushaem.com&utmcs=windows-1251&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=%D0%A1%D0%B0%D0%BB%D0%B0%D1%82%20%D0%B8%D0%B7%20%D0%BE%D1%82%D0%B2%D0%B0%D1%80%D0%BD%D0%BE%D0%B9%20%D0%B3%D0%BE%D0%B2%D1%8F%D0%B4%D0%B8%D0%BD%D1%8B*%20%3A%20kushaem.com&utmhid=747460706&utmr=-&utmp=%2Frecipe.asp%3Fid%3D316%26lang%3Dru%26name%3D%3F%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3Fa%255C%2C1%3F%3F%255C%2C2a%3Fi%255C%2Ca%255C%2Ca%3F%3F&utmht=1662157717413&utmac=UA-469859-5&utmcc=__utma%3D58297008.413597691.1662157717.1662157717.1662157717.1%3B%2B__utmz%3D58297008.1662157717.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1802557331&utmredir=1&utmu=HAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Fri, 02 Sep 2022 22:28:39 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0fb935f05e6aaba744f686e2bb3928f9
5b8211247e237b44ddd5bc3df47063bfcac84b0e
a998f91aa98aee49510e973a892dd630395bb1af087c7dbc77b61d29bef2bf68
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202208300101/show_ads_impl_with_ama_fy2021.js?client=pub-1749770216186949&plah=kushaem.com&bust=31069274
200 OK 124 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202208300101/show_ads_impl_with_ama_fy2021.js?client=pub-1749770216186949&plah=kushaem.com&bust=31069274
IP
File type ASCII text, with very long lines (4516)
Size 124 kB (123678 bytes)
Hash 89eddfe877f282038dd5ee2b611024ab
cceaefd2ae4ce7f5b180d48511829b66e296746a
ce8a7c263b6e51e0ad8912c88baf47b72aa30b3c1b1ee7831d466d0698783f17
GET /pagead/managed/js/adsense/m202208300101/show_ads_impl_with_ama_fy2021.js?client=pub-1749770216186949&plah=kushaem.com&bust=31069274 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kushaem.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Fri, 02 Sep 2022 22:28:39 GMT
expires: Fri, 02 Sep 2022 22:28:39 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 4378922285465744357
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 123678
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0fb935f05e6aaba744f686e2bb3928f9
5b8211247e237b44ddd5bc3df47063bfcac84b0e
a998f91aa98aee49510e973a892dd630395bb1af087c7dbc77b61d29bef2bf68
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
kushaem.com/favicon.ico
404 Not Found 4.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (365)
Hash 49013a2e7d9f7895bd1754f42120d012
a89b83cc2120ca3b24aebda7184c0cd27d85a87d
dd9cdb1a10c4fa1d12896ea4da8ba369a431f701c325da851683fefe86b490d8
GET /favicon.ico HTTP/1.1
Host: kushaem.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kushaem.com/recipe.asp?id=316&lang=ru&name=??i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a?a\,1??\,2a?i\,a\,a??
Cookie: lang=ru; ASPSESSIONIDSSRBSBTT=DJLAHJOCMENGKLPFLNHGGBFL; ARRAffinity=6fe1b7ab3dc258e502a30911e9b1ddeb1cc792271fad1b1309672dd71d55508e; WAWebSiteSID=4a0811019fbe4286abe5d421d31ea1ea; BIGipServerEL_Customer_HTTP2=!yVznCr1e6OsjXEVeEe65VNrtxl1X+wIG0dW8qEmS+Gy+hPMiv56YBK7cPqxikVzHhxtS6eOt5z1ATg==; __utma=58297008.413597691.1662157717.1662157717.1662157717.1; __utmb=58297008.1.10.1662157717; __utmc=58297008; __utmz=58297008.1662157717.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1
HTTP/1.1 404 Not Found
Cache-Control: private
Content-Length: 4842
Content-Type: text/html; charset=utf-8
Server:
X-Powered-By: ASP.NET
Date: Fri, 02 Sep 2022 22:28:39 GMT
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2d7a177ba4f5d07378f3f80625ca76d4
aeb98c6fcc81f8337738537995dc458e4ca05744
81581b3594ced0fbfec9a2b0818692ba149112c2aecf167c661d52f26dd5904f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1a4f17bd63350fcbd827d3598f23afa1
6bd2b6656712c2ca057e2a22baebbf20b3cd3772
9303c40cbc559e8a5bdcde4a1bd32c41e1b9403fcee96b5581bf511499eedb3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9665d92cfb2f9db5f7032ed692dff0e0
2ca6220de116f04429a7ce3f3c8f95cae61db137
5cc77ac9117df4aa52cc268287bf82f9dde172f1bcd7f640d3f0ef04a5ed07c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
partner.googleadservices.com/gampad/cookie.js?domain=kushaem.com&callback=_gfp_s_&client=ca-pub-1749770216186949
200 OK 202 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=kushaem.com&callback=_gfp_s_&client=ca-pub-1749770216186949
IP
File type ASCII text, with no line terminators
Hash b3880de2a3f21c6525156e8eae2976f7
d0cf901fe2a46b527ca1ce61b2d36cc189acc234
cbc55153a6db84cbaaf004e5e85d48e4106d63a076665d8954f801fa7ccbe31a
GET /gampad/cookie.js?domain=kushaem.com&callback=_gfp_s_&client=ca-pub-1749770216186949 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kushaem.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 02 Sep 2022 22:28:39 GMT
server: cafe
cache-control: private
content-length: 202
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=kushaem.com
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=kushaem.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=kushaem.com HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kushaem.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 02 Sep 2022 22:28:39 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=kushaem.com
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=kushaem.com
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=kushaem.com HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kushaem.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Fri, 02 Sep 2022 22:28:39 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2d7a177ba4f5d07378f3f80625ca76d4
aeb98c6fcc81f8337738537995dc458e4ca05744
81581b3594ced0fbfec9a2b0818692ba149112c2aecf167c661d52f26dd5904f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1a4f17bd63350fcbd827d3598f23afa1
6bd2b6656712c2ca057e2a22baebbf20b3cd3772
9303c40cbc559e8a5bdcde4a1bd32c41e1b9403fcee96b5581bf511499eedb3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9665d92cfb2f9db5f7032ed692dff0e0
2ca6220de116f04429a7ce3f3c8f95cae61db137
5cc77ac9117df4aa52cc268287bf82f9dde172f1bcd7f640d3f0ef04a5ed07c5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dfe1fbb87f4c18f02c645d7dbe667406
e78b12ad21586958fd1126b5c91057e2e168183d
6110dacd0f764fb0dc689a8d430b2f44e02d8c0791f39d67190bbb991c969c5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kushaem.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Fri, 02 Sep 2022 22:28:40 GMT
expires: Fri, 02 Sep 2022 22:28:40 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash f530c16b248be97e10df228df6a41c24
ca3c3a38bbeef6906682b3e0b2a7be40c08b0925
f45287dcfd79a2411e79f98c834c6f7eff8a281a9b4fdba0124be9d204987786
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kushaem.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 07:47:45 GMT
expires: Fri, 01 Sep 2023 07:47:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
age: 139255
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6b6b5ffecd53193507458fbe6e66d3f0
c96009132e435078cd79e19b19eeb0dbcf9abef3
229806893f073d6d725880c375c2f72ab09221a46095e1203d7379c1a29b8bef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 22:28:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 515 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 8bf25c136d98e14a8332a0367a697a39
1d3ba4772530b1b3b5e5900bb5b294fc5ef005c2
8082856c0b9f01ca24b64602f57cf2b1c934f8c51476f434eae1400191f5d394
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kushaem.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Fri, 02 Sep 2022 22:28:40 GMT
date: Fri, 02 Sep 2022 22:28:40 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-Ezh7G-VsQI83UqMKNZ-BAA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 515
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5954
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 22:28:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5954
Expires: Sat, 03 Sep 2022 00:07:54 GMT
Date: Fri, 02 Sep 2022 22:28:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 955f2a35bd6b3802670e7fa8a7cda833
4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c
2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: GHd4FOjIO1OP7wSOVcnOryE5ux4hlr_kC0dfJs3LqgQUbxMzuFxc1A==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:37:28 GMT
age: 3072
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c3b7580a37e6eb7e5bd18491f1d4dd6
288b82ad8f924eb9570ae1c55da84d041f862366
046d1ef76448c53446068ef5f8315b7299484996cdebfd9d1e749b4ded9c7d3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5079
x-amzn-requestid: 3b19c77a-2e9b-499f-890b-36fc4ee72ba7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XslOVEtZIAMFv1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630e825b-01b7b71617b59f7414a0e5e5;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 21:34:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zYT0vF7Bxa5m84D12jI2w_A-MzR3wIMBOb0ubTEdNMlpYUes5aYdlQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:48:05 GMT
age: 2435
etag: "288b82ad8f924eb9570ae1c55da84d041f862366"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ba50b2fd1814c5ffc95aef40c69ce8c
cbb4546228115cccc122b16209e70171bef5c1f2
de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 6z4CQAGtLJgZm_hTHyJTWDY189njGx4I2t9dHecfiSiKxG2WTDI1uQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:01:11 GMT
age: 1649
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e05660322f0368dd2bf8067d7e4554d
ec65cb47d86488f734c945a210d5f636a40fea2c
98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: eWPq37qiXo5wamKlEu7STGXPBfiJpqsVilJlF_wi7oudjevWZI0K8A==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:55:46 GMT
age: 1974
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12756903aaa74164feb5f8525398ca36
9fef9b071daea6793cbbdfe391254ac4326b1aa2
6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16818
x-amzn-requestid: fa921878-2054-453b-b313-681cdd9c9068
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj-Z_HUNIAMFltg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b110c-053ce81943fea70c2de7daa0;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 06:54:04 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: CDyJUMKmUlrT3LgfeiZhQN1XEV2vKTIZtmV4QZYXaoM4PWbYo8IyJA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 14:46:29 GMT
age: 27731
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d848f7606889b048b6334e70d8a5e0
85239ef4f2fee8d3345e599bc942cab63ff3aaf6
da6cf33b440b51f72a70f309d62fd581aed246b6a78b8f329fa3899db15ff86d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5889
x-amzn-requestid: 42237574-f86e-4ece-b986-6d0c5910fcc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzMVgHajoAMFmXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112756-48ff9d98464cf3c9680d97b4;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:42:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _7BBSlQQucoO5poncTYuX4fcmS4WFg3UcVFXalckGCCNFKJ0h5UpsQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:06:51 GMT
age: 1309
etag: "85239ef4f2fee8d3345e599bc942cab63ff3aaf6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
199.233.255.67
104.21.67.63
93.184.220.29
23.36.77.32