| cdn-topersoft.nl/download/programs/goodbyedpi.0.2.2-launcher.ver-5.6.zip |  172.67.193.224 | 301 Moved Permanently | 0 B |
URL HTTP/1.1cdn-topersoft.nl/download/programs/goodbyedpi.0.2.2-launcher.ver-5.6.zip IP172.67.193.224:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /download/programs/goodbyedpi.0.2.2-launcher.ver-5.6.zip HTTP/1.1
Host: cdn-topersoft.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 04 Oct 2022 17:00:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 04 Oct 2022 18:00:03 GMT
Location: https://cdn-topersoft.nl/download/programs/goodbyedpi.0.2.2-launcher.ver-5.6.zip
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oe%2BcqzIa2d%2B0UtLbhvQ0tm0kNHI%2FZqsdf3CX%2BOpeuOpCmpujuFVI0zPSY1f%2B90gyYcnh2roqB77DmpDLIPV%2FCnQtbLO0ulp62SS15z0jqqKDJoLQrEKr5Gxd87%2BochHmrYnf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754f78b71dea0b69-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9955bda9c9ef64bc5700a14af0bae25e 8de7b7469e905af0374bdfcc3006bbb844f13e94 1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9441
Expires: Tue, 04 Oct 2022 19:37:24 GMT
Date: Tue, 04 Oct 2022 17:00:03 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.115 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 16:14:34 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dacDSiR30vN_0nWwYJDWABeVIPIm7gUp_aXmLJgnBrKl3rpBlQM_dw==
Age: 2729
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.25 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.25:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0egJvX0BDpxROe6V2HpxnE2QUGCcuBJ2z2KzCMAY1LwcQ7CTQTza7w==
age: 41496
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 344 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash56884d14b6106b3715c111196ce03758 6114bc75ff05a54073706c8462ce87d6245c7e2e 72f1ca60e5d6983956ca2b0c94a64251668b2dca16d35b847eafa343aaaa1d83
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "72F1CA60E5D6983956CA2B0C94A64251668B2DCA16D35B847EAFA343AAAA1D83"
Last-Modified: Mon, 03 Oct 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13515
Expires: Tue, 04 Oct 2022 20:45:18 GMT
Date: Tue, 04 Oct 2022 17:00:03 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 17:00:03 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.115 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 16:29:33 GMT
Expires: Tue, 04 Oct 2022 16:31:38 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xDPomo7f6yROvlLo5CdAhJ6ISiAYWMrfHZuF1o_iHrOOC19-Lc_CLQ==
Age: 1830
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash16ebfb2aa621547ecf581e26fc828a7d f78993331f6f5b8af6409a9ad2fc50b77070f68a 0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4854
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 17:00:04 GMT
Last-Modified: Tue, 04 Oct 2022 15:39:10 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.215.91.121 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.215.91.121:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: c4F4JirqN1GSNktVwxfjaQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vFzaF9FvRbxJh7qgdkZykJ1UFak=
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 344 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash56884d14b6106b3715c111196ce03758 6114bc75ff05a54073706c8462ce87d6245c7e2e 72f1ca60e5d6983956ca2b0c94a64251668b2dca16d35b847eafa343aaaa1d83
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "72F1CA60E5D6983956CA2B0C94A64251668B2DCA16D35B847EAFA343AAAA1D83"
Last-Modified: Mon, 03 Oct 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13514
Expires: Tue, 04 Oct 2022 20:45:18 GMT
Date: Tue, 04 Oct 2022 17:00:04 GMT
Connection: keep-alive
|
|
| topersoft.com/images/err.jpg | 172.67.146.70 | 200 OK | 30 kB |
URL HTTP/2topersoft.com/images/err.jpg IP172.67.146.70:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2008:12:05 12:57:41], baseline, precision 8, 500x396, components 3\012- data Hashac4a294ba5f08609046c2d19f117db3b e14aee694904bc69988c582031a4186ce95cc4c1 bbb6a6fb7bb54598b3b9272e7ab00f11acc4becd6d85f1e626b7f429ed6b28c6
GET /images/err.jpg HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: image/jpeg
content-length: 30545
last-modified: Tue, 10 May 2022 18:59:01 GMT
etag: "627ab5f5-7751"
cache-control: max-age=1800
cf-cache-status: HIT
age: 2266
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=21GbuQBY4BboZ6IqmmTjr2ceBdYD1piO5fIFsemEMGT%2BUZ8jRPmQ%2Brcxws0CkimkkSbiHr0lRL9%2Bahf8Km1GgQC2dcneqzdn1ZrHeU1YOxz8A1LNOYa9W%2FLHmbI6nojs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c44f14b51e-OSL
X-Firefox-Spdy: h2
|
|
| topersoft.com/media/system/js/caption.js | 172.67.146.70 | 200 OK | 813 B |
URL HTTP/2topersoft.com/media/system/js/caption.js IP172.67.146.70:0
Hash171373731d03e971574de71e0201dce9 06731703f061d6713d3d0c67fede53a822fe57bc 607744f504ce2ee54a8f395cb82858c753e32519db52fa3bd06d6b077d7f18cc
GET /media/system/js/caption.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=729
etag: W/"627ab5f8-2d9"
last-modified: Tue, 10 May 2022 18:59:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BZRf1fARcdfzpk8mjOopGBss%2BZFjxj4B1R19ep7xmKFJNaGsX5%2FmuVH8kEhphM7JyWNOOVWQtZaneNteWrRxOgl6uZUH5EqqlznVXE2eMRma%2Ba3TnEyqBHsnehGN2Lqt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43ee7b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-174142517-1 | 142.250.74.168 | 200 OK | 42 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-174142517-1 IP142.250.74.168:0
File typeASCII text, with very long lines (2039) Hash4823e63c03a8b649b3375040fc414c7a 9f2c6b3dd6bb38d1c299b430b785ff2886325c17 14a61e2d118491712eb2255afa92f76a660df23601acff073c7e28db7c474eda
GET /gtag/js?id=UA-174142517-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 04 Oct 2022 17:00:05 GMT
expires: Tue, 04 Oct 2022 17:00:05 GMT
cache-control: private, max-age=900
last-modified: Tue, 04 Oct 2022 16:03:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42365
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| topersoft.com/media/ext_tss/assets/js/ext_tss.js | 172.67.146.70 | 200 OK | 848 B |
URL HTTP/2topersoft.com/media/ext_tss/assets/js/ext_tss.js IP172.67.146.70:0
Hash2eb07fefc597f659f2a17ed8dce986ae 75d60539d475d6ca8d8a44d9d4c2d51b3a1ae798 cfe0af3c7d0f34a80c184b71d8c7a0ad2f7bf6742cc1b092fd1a1f9b65d04c51
GET /media/ext_tss/assets/js/ext_tss.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1064
etag: W/"627ab5f8-428"
last-modified: Tue, 10 May 2022 18:59:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n2OMSU4%2F4BILNFx6LEfKs4wJMoRN9rkZ4JhNRk8FME3j3vN%2Bo1%2Bsrc%2BvfP7e6DJq8b5jzVaOMhUdrz1NYexc0JQtDsfTZoHlQAlLS9Qtq6%2FL5xmeo%2FxxnhmJbm2j11QX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43ee9b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/images/logo_topersoft.png | 172.67.146.70 | 200 OK | 14 kB |
URL HTTP/2topersoft.com/images/logo_topersoft.png IP172.67.146.70:0
File typePNG image data, 300 x 55, 8-bit/color RGBA, non-interlaced\012- data Hash250e93c1005bd97bc5824c1231cd9620 036acc8507e3da1231b0e0086c05a4b0e3c83b01 44e277eeca888d4f015726ef409a4fa1c54fd2824f76c9f3717e9a1e2b8615ed
GET /images/logo_topersoft.png HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: image/png
content-length: 13685
last-modified: Tue, 10 May 2022 18:59:01 GMT
etag: "627ab5f5-3575"
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qZTavlVvCZThDX1BlkFKHzqDqfYj85KOXs06qXSvRwJBV3sUoz%2FhcjJLduYcwMR4P1%2Fi%2FhECo7nTaxWVDeV3tUsP%2BkMtBmN%2FzCI1XopqQ9j%2F2oZF4%2Bk2iABPwnrCSKYu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c558c0b51e-OSL
X-Firefox-Spdy: h2
|
|
| topersoft.com/templates/rt_afterburner2/css-compiled/master-a07f8a36db3ecc4d92e165d697502255.css | 172.67.146.70 | 200 OK | 41 kB |
URL HTTP/2topersoft.com/templates/rt_afterburner2/css-compiled/master-a07f8a36db3ecc4d92e165d697502255.css IP172.67.146.70:0
Hashe7102acc8e1afb885578eaf58e71c78d 134a6f2f94a3e5f7a032bb40b8081c866652ecb3 a981e2e499076495a99345fadf2b38b66e0fa87f1d85c65e833e4b351507f461
GET /templates/rt_afterburner2/css-compiled/master-a07f8a36db3ecc4d92e165d697502255.css HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=64794
etag: W/"630e16d6-fd1a"
last-modified: Tue, 30 Aug 2022 13:55:34 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ykLMkG8S7NNU1oWlMJVVOrNY%2FqFlFn0cxcOlp1phLSGKx3CKWi%2B883lCE5rxcjjycu8S0WNGRQtbzcV6khJCDyaOFjXD8N%2Bv33bn3ynK%2ByHwxjQrmA4%2B0JiAgv7rAWwB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c42ed3b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v5.0.12/webfonts/fa-brands-400.woff2 | 172.64.132.15 | 200 OK | 61 kB |
URL HTTP/2use.fontawesome.com/releases/v5.0.12/webfonts/fa-brands-400.woff2 IP172.64.132.15:0
File typeWeb Open Font Format (Version 2), TrueType, length 61336, version 1.0\012- data Hash5ac8c4fec34fe5e740ab560e4a90240b 36edef484776634579f5e472b32597c9bbc30840 1cbab83578df331197295ca15e20b683d0248ba6ce26c8973d421b329e9ce56f
GET /releases/v5.0.12/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: font/woff2
content-length: 61336
x-amz-id-2: KUeOyRR4d5Bpet7ojEpcVR+n2JEDc7EOmGdciCCiwhqnTO35LZ04S67cixKjHbdxf162fJzySSg=
x-amz-request-id: 1Q7SC8PMXHD9JFQR
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:27:31 GMT
etag: "5ac8c4fec34fe5e740ab560e4a90240b"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 20279
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qepBYDnDuzMKbZ4bMLXRRleFKi0Qr2H5IDvFPRsRXZ85Gdwg5cBtzN4BWxiuTPAyKsfJE607QREuXdrwumXMTQDyORwh6%2BlTdAxqq9kPCVJjjeI43vdxdiVgJev5Rmj92xQN2jIc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c5b8e98e0c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ssl.google-analytics.com/ga.js | 216.58.207.200 | 200 OK | 17 kB |
URL HTTP/2ssl.google-analytics.com/ga.js IP216.58.207.200:0
File typeASCII text, with very long lines (1305) Hash01d5892e6e243b52998310c2925b9f3a 58180151b6a6ee4af73583a214b68efb9e8844d4 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Tue, 04 Oct 2022 16:17:11 GMT
expires: Tue, 04 Oct 2022 18:17:11 GMT
cache-control: public, max-age=7200
age: 2574
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| topersoft.com/libraries/gantry/css/grid-responsive.css | 172.67.146.70 | 200 OK | 14 kB |
URL HTTP/2topersoft.com/libraries/gantry/css/grid-responsive.css IP172.67.146.70:0
Hashd5fa0d9c27bbe91cc88205b0f51ec5c3 da3b6447b6437b2374894ccd1bf718807aed844a 256e9de449508c53c199b518877646667f8e2007aae314571c8b39c61173b644
GET /libraries/gantry/css/grid-responsive.css HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=5456
etag: W/"627ab5f7-1550"
last-modified: Tue, 10 May 2022 18:59:03 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qnr8EqXLbhhfQyrc0gOSQiNtLG5TvJS41ysHfmtA5xcbWQusPuykoVp5RRnBmL6CUaFlqnYBGtNcTBHMiJ7uq6LrgE2ZXkPbh0zhnRTlkFf6JoKNNbWb17XKjJBhiI0%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c42ec9b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 04 Oct 2022 16:41:09 GMT
expires: Tue, 04 Oct 2022 18:41:09 GMT
cache-control: public, max-age=7200
age: 1136
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash55331c1dc7e7ebbf456220986278469d d69a62ee47b03fde68db666512417dda2ae5ad13 a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20206
Expires: Tue, 04 Oct 2022 22:36:51 GMT
Date: Tue, 04 Oct 2022 17:00:05 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash55331c1dc7e7ebbf456220986278469d d69a62ee47b03fde68db666512417dda2ae5ad13 a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20206
Expires: Tue, 04 Oct 2022 22:36:51 GMT
Date: Tue, 04 Oct 2022 17:00:05 GMT
Connection: keep-alive
|
|
| mc.yandex.ru/metrika/tag.js |  87.250.251.119 | 200 OK | 72 kB |
URL HTTP/2mc.yandex.ru/metrika/tag.js IP87.250.251.119:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (593) Hash7a68c8644032413981e4ba5bc0d66c4a 2d46ca8055e8577ae7138140e34a6e633434973c e0573e9a9cbfc3f00a921fa64c50270f5941a1ebb253ab70af2cc0dac45cb0d5
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 72341
date: Tue, 04 Oct 2022 17:00:05 GMT
access-control-allow-origin: *
etag: "633be002-11a95"
expires: Tue, 04 Oct 2022 18:00:05 GMT
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg | 34.120.237.76 | 200 OK | 4.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6779181f9c06975f2a662da743893939 585e7146fd24cdc2496b05baafea04091dc541e2 8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MiSh_FjAciKCaOakY2mM_EHBN1Z6GIDYIP8mwS4ikkrToQN3Ktsv2g==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:56:46 GMT
age: 68599
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/j/collect?v=1&_v=j98&a=2116653338&t=pageview&_s=1&dl=https%3A%2F%2Ftopersoft.com%2F404&ul=en-us&de=UTF-8&dt=%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%3A%20404&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=247373057.599866458.1664902805.1664902805.1664902805.1&_utmz=247373057.1664902805.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1664902805102&_u=YQBCAUABAAAAACAAI~&jid=783774446&gjid=1039080238&cid=599866458.1664902805&tid=UA-174142517-1&_gid=1759616500.1664902805&_r=1>m=2ou9s0&z=247759429 | 142.250.74.174 | 200 OK | 1 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j98&a=2116653338&t=pageview&_s=1&dl=https%3A%2F%2Ftopersoft.com%2F404&ul=en-us&de=UTF-8&dt=%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%3A%20404&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=247373057.599866458.1664902805.1664902805.1664902805.1&_utmz=247373057.1664902805.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1664902805102&_u=YQBCAUABAAAAACAAI~&jid=783774446&gjid=1039080238&cid=599866458.1664902805&tid=UA-174142517-1&_gid=1759616500.1664902805&_r=1>m=2ou9s0&z=247759429 IP142.250.74.174:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&a=2116653338&t=pageview&_s=1&dl=https%3A%2F%2Ftopersoft.com%2F404&ul=en-us&de=UTF-8&dt=%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%3A%20404&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_utma=247373057.599866458.1664902805.1664902805.1664902805.1&_utmz=247373057.1664902805.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)&_utmht=1664902805102&_u=YQBCAUABAAAAACAAI~&jid=783774446&gjid=1039080238&cid=599866458.1664902805&tid=UA-174142517-1&_gid=1759616500.1664902805&_r=1>m=2ou9s0&z=247759429 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://topersoft.com
date: Tue, 04 Oct 2022 17:00:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg | 34.120.237.76 | 200 OK | 5.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6c6882c60d7ca6f918c77104e3ad1d52 20ef861be49c652a938e0145e4ca3a60159367e2 861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ovm2wuk28PygH4EZNEUoPchoHQggWCyXbYHOjMV1tZmfyDrL6PjPZA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 22:29:19 GMT
age: 66646
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg | 34.120.237.76 | 200 OK | 4.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash24a4a122273ef9f772852031eb13114a c20f1fac9020eb4bd6c84583f73872979639b991 8e1ffbed5f156637ed2f22e81d03f6d85eff0c28237c1639ea5f977e92ee7b70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffdb412b7-1bf6-4a48-b9f1-b171f540e434.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4151
x-amzn-requestid: f709a11e-cbea-4965-8502-94ddbd8768bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvSF3YIAMFdow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-29bfa31d51e8f60b38136dba;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 7H1QKlOtoBoVz93G5lddxHSGiTjtMnHJCZX5FhwqhNPkspslaDoFQA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:57:01 GMT
age: 68584
etag: "c20f1fac9020eb4bd6c84583f73872979639b991"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp | 34.120.237.76 | 200 OK | 9.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd8c08f8066cc732de8befd6ccd629a95 22aab05208a01ae5def4d63dc145085630f57bcb f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: p5nOqBojKO6S-c_DxIu8B3p-NK0pzRHkz0DOPeyv7PQt9h0x1jdtoQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:55:54 GMT
age: 68651
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash206fb65e75dbadf119512f71e0b78402 58ff0bf8ce7528b303d28bab01a80ad721705569 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:53 GMT
age: 44232
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/advert.gif | 87.250.251.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP87.250.251.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 17:00:06 GMT
access-control-allow-origin: *
etag: "633be002-2b"
expires: Tue, 04 Oct 2022 18:00:06 GMT
accept-ranges: bytes
last-modified: Tue, 04 Oct 2022 10:25:54 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/65904610?wmode=7&page-url=https%3A%2F%2Ftopersoft.com%2F404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1563361036504%3Ahid%3A279415243%3Az%3A0%3Ai%3A20221004170005%3Aet%3A1664902805%3Ac%3A1%3Arn%3A177327971%3Arqn%3A1%3Au%3A1664902805340052590%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A14%2C20%2C198%2C1%2C1907%2C0%2C%2C294%2C12%2C%2C%2C%2C2515%3Ans%3A1664902802317%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664902805%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%3A%20404&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) | 87.250.251.119 | 302 Found | 407 B |
URL HTTP/2mc.yandex.ru/watch/65904610?wmode=7&page-url=https%3A%2F%2Ftopersoft.com%2F404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1563361036504%3Ahid%3A279415243%3Az%3A0%3Ai%3A20221004170005%3Aet%3A1664902805%3Ac%3A1%3Arn%3A177327971%3Arqn%3A1%3Au%3A1664902805340052590%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A14%2C20%2C198%2C1%2C1907%2C0%2C%2C294%2C12%2C%2C%2C%2C2515%3Ans%3A1664902802317%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664902805%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%3A%20404&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) IP87.250.251.119:0
File typeJSON data\012- , ASCII text, with very long lines (407), with no line terminators Hash695b11f224eb7fdd5c0e9750a3d3ea5a f0467ed9d2b0b730f5a8709dc6bc57a33a860e7f ce2792e95fb52dd9b4573ef2b168f58502ed2c66456c5afb6524622964ceeba9
GET /watch/65904610?wmode=7&page-url=https%3A%2F%2Ftopersoft.com%2F404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1563361036504%3Ahid%3A279415243%3Az%3A0%3Ai%3A20221004170005%3Aet%3A1664902805%3Ac%3A1%3Arn%3A177327971%3Arqn%3A1%3Au%3A1664902805340052590%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A14%2C20%2C198%2C1%2C1907%2C0%2C%2C294%2C12%2C%2C%2C%2C2515%3Ans%3A1664902802317%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664902805%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%3A%20404&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/65904610/1?wmode=7&page-url=https%3A%2F%2Ftopersoft.com%2F404&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A2517%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A1563361036504%3Ahid%3A279415243%3Az%3A0%3Ai%3A20221004170005%3Aet%3A1664902805%3Ac%3A1%3Arn%3A177327971%3Arqn%3A1%3Au%3A1664902805340052590%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A14%2C20%2C198%2C1%2C1907%2C0%2C%2C294%2C12%2C%2C%2C%2C2515%3Ans%3A1664902802317%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664902805%3At%3A%D0%9E%D1%88%D0%B8%D0%B1%D0%BA%D0%B0%3A%20404&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 04 Oct 2022 17:00:05 GMT
access-control-allow-origin: https://topersoft.com
set-cookie: yandexuid=8919428931664902805; Expires=Wed, 04-Oct-2023 17:00:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8919428931664902805; Expires=Wed, 04-Oct-2023 17:00:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2204393511664902805; Path=/; SameSite=None; Secure
i=WI8PEp6+O4L/tXpwGxiII6hhabSd3r1B/7xTFS3vfNdnPTFc/0lcV8qFPR5paw9C5XGA0rl71oq+/tWHssvYwIwoHyU=; Expires=Fri, 01-Oct-2032 17:00:01 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696438805.yrts.1664902805#1696438805.yrtsi.1664902805; Expires=Wed, 04-Oct-2023 17:00:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 17:00:05 GMT
last-modified: Tue, 04-Oct-2022 17:00:05 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/webvisor/65904610?wv-check=24751&wv-type=0&wmode=0&wv-part=1&wv-hit=279415243&page-url=https%3A%2F%2Ftopersoft.com%2F404&rn=568048359&browser-info=gdpr%3A14%3Aet%3A1664902811%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221004170011%3Au%3A1664902805340052590%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664902811&t=gdpr(14)ti(2) | 87.250.251.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/webvisor/65904610?wv-check=24751&wv-type=0&wmode=0&wv-part=1&wv-hit=279415243&page-url=https%3A%2F%2Ftopersoft.com%2F404&rn=568048359&browser-info=gdpr%3A14%3Aet%3A1664902811%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221004170011%3Au%3A1664902805340052590%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664902811&t=gdpr(14)ti(2) IP87.250.251.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/65904610?wv-check=24751&wv-type=0&wmode=0&wv-part=1&wv-hit=279415243&page-url=https%3A%2F%2Ftopersoft.com%2F404&rn=568048359&browser-info=gdpr%3A14%3Aet%3A1664902811%3Aw%3A1268x939%3Av%3A904%3Az%3A0%3Ai%3A20221004170011%3Au%3A1664902805340052590%3Avf%3Aat6op7b9z7b01ildsv2t4%3Awe%3A1%3Ast%3A1664902811&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 17:00:11 GMT
access-control-allow-origin: https://topersoft.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 17:00:11 GMT
last-modified: Tue, 04-Oct-2022 17:00:11 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 |  104.18.47.230 | 200 OK | 0 B |
URL HTTP/2static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 IP104.18.47.230:0
GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c48f6c0b39-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/templates/rt_afterburner2/css-compiled/menu-responsive-50c3b08cf0e172f85e85fe4000aaa4c2.css | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/templates/rt_afterburner2/css-compiled/menu-responsive-50c3b08cf0e172f85e85fe4000aaa4c2.css IP172.67.146.70:0
GET /templates/rt_afterburner2/css-compiled/menu-responsive-50c3b08cf0e172f85e85fe4000aaa4c2.css HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=4434
etag: W/"630e16d6-1152"
last-modified: Tue, 30 Aug 2022 13:55:34 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OShO59zo8D8q%2Fi2kLsh1GCklGzuWyREYmWgAoAs7YI6uneyi9tGtBkNx2JNNeJ1DVUfrQKycwMRu6GTrmhw6TwBZs3cs9z5x3lsrHT9msiTRhrB1RS5Q0KZiuHhg5%2Brb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c42ec7b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/media/system/js/mootools-core.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/media/system/js/mootools-core.js IP172.67.146.70:0
GET /media/system/js/mootools-core.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=96362
etag: W/"627ab5f8-1786a"
last-modified: Tue, 10 May 2022 18:59:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vCsiXz2Pp3sHzrjyUqV5V%2Fvd3HkJl8XHhh5P%2BSpmZRP1HYCCtjfHIfLAHpcgFXNg7WGH6IqZB4aN2XLiKU6z%2B8T6JIN%2B4FrLQVUXa6Ys1dteqxWBJ0D1ZZV66k%2FJzMTx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43edeb51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/templates/rt_afterburner2/css-compiled/mediaqueries.css | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/templates/rt_afterburner2/css-compiled/mediaqueries.css IP172.67.146.70:0
GET /templates/rt_afterburner2/css-compiled/mediaqueries.css HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1953
etag: W/"630e16d6-7a1"
last-modified: Tue, 30 Aug 2022 13:55:34 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=waWjK4UmyCqZsfYSeLSBvJG7nKV9JcBf3Rq4B7EEnquPqDyNeHBGk2kfwXK0J9PQ9sEUO2UozgvhySR5JD7TranSEewWbVLKXvygxOSTPD1WA9QGZ6owCjg4N7BjMmli"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c43edab51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP172.67.146.70:0
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 11:11:52 GMT
etag: W/"633188f8-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6fWrAvH5szNhdnw%2Bv9eb5YQJjkDlQeuyL73KcjLQf3A0b5ldRECfIvsUrkPT9DbHzGeQaK3P7jSbZoL1d9SpCCIVe1JHI0v8nkyDouNj4TaqIwCHgHIHWYDl33PSrRNy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c44f18b51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 06 Oct 2022 17:00:05 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/templates/rt_afterburner2/js/rokmediaqueries.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/templates/rt_afterburner2/js/rokmediaqueries.js IP172.67.146.70:0
GET /templates/rt_afterburner2/js/rokmediaqueries.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=4674
etag: W/"627ab5f7-1242"
last-modified: Tue, 10 May 2022 18:59:03 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 5339
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X9harOe%2FOfzv1OBECxo8O4w%2FFdsy5ktgbxTzLgsUaOAKzzV0eRtFcEgQTFTzc3hU1U%2BiYpc36Q9kwLFWKld57ORtcZxXMkOaXx6rYeT4Emwgd0LbSZRxNrZou%2Fo2p7Fa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43efcb51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/templates/rt_afterburner2/css-compiled/bootstrap.css | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/templates/rt_afterburner2/css-compiled/bootstrap.css IP172.67.146.70:0
GET /templates/rt_afterburner2/css-compiled/bootstrap.css HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=68022
etag: W/"630e16d6-109b6"
last-modified: Tue, 30 Aug 2022 13:55:34 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kkeKtpSKTreztsJdyziiAs1n1XUIgDXrI3B%2B1Ok7MLd%2BSrxNvYNIUuCzc8vum%2FehrNpsZftYedVvnAEw8Ucl2Nze8XprAWnCUH%2BtfYeWN%2BxBrvsuDsZ2nErpfh%2Bmow60"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c42eceb51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/media/ext_tss/assets/css/ext_tss.css | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/media/ext_tss/assets/css/ext_tss.css IP172.67.146.70:0
GET /media/ext_tss/assets/css/ext_tss.css HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=2394
etag: W/"627ab5f8-95a"
last-modified: Tue, 10 May 2022 18:59:04 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2F6Ir6S40Y%2BffYp5jIAabvDMTDhrTRgFY37dJATYNYhHtimxT2UJgNokwaFWnR5scwGCERlCLTtbvJ0uxtHy5Len5KlOp1YEQqpojZt15Dn1Hqp35NHEww3ymxvJRdtC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c42ec1b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/libraries/gantry/js/browser-engines.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/libraries/gantry/js/browser-engines.js IP172.67.146.70:0
GET /libraries/gantry/js/browser-engines.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1186
etag: W/"627ab5f7-4a2"
last-modified: Tue, 10 May 2022 18:59:03 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mg9M1gq3fWMPrHFtjU1WVoheUAmAzdXG7FcVTsdyCQFEk7PkpqUpLVxeIl41ZbclFM1AbgGZb9lUXJBDlu3WiOKWNnfKndye3VmE5OIhICoXZUxncW9fBsVq%2Fh8tn0Pt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43eeeb51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/modules/mod_roknavmenu/themes/default/js/responsive.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/modules/mod_roknavmenu/themes/default/js/responsive.js IP172.67.146.70:0
GET /modules/mod_roknavmenu/themes/default/js/responsive.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2134
etag: W/"627ab5f8-856"
last-modified: Tue, 10 May 2022 18:59:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZPEAlX0safPVeeot8om%2FgcMf1kkPacy1yLNQ7%2Fe5ebdodCaop3CAjOquqNH%2BKhPr%2FeAc%2F1mWEvfGajUuzhEr4EdJ5qb3fo3iBVmr3prJY%2FzBVgnRBGY8L7Ip2Qi1inC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c44f0bb51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| use.fontawesome.com/releases/v5.0.12/css/all.css | 172.64.132.15 | 200 OK | 0 B |
URL HTTP/2use.fontawesome.com/releases/v5.0.12/css/all.css IP172.64.132.15:0
GET /releases/v5.0.12/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://topersoft.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
x-amz-id-2: EcGwCc+CoXvapTyRNlfvg3ZJd0qyAqfvaSMenZmFD6vuD4sYRK0JoSN0kVXcQpWTag8z1yf5DfU=
x-amz-request-id: X8CXRMPFG5ZX3DFW
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:27:17 GMT
etag: W/"d896a88b71aa2ba5d6bd670429bf1bad"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 20280
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FamQ5%2Bvd5uGDYWjxJfYaXoAR6JKe%2F5sggD7msanjWTU7yVTK8StiSIU2B%2B%2ByegGYCTq%2FGzmBK1yFV5qRFgs5Rert%2BMZeHr%2Bek%2FiJ0zJ5PUz9JU8TZzP%2FUmblz3mvH9si38FQHvWJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c48f328e0c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| topersoft.com/templates/rt_afterburner2/css-compiled/menu-50c3b08cf0e172f85e85fe4000aaa4c2.css | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/templates/rt_afterburner2/css-compiled/menu-50c3b08cf0e172f85e85fe4000aaa4c2.css IP172.67.146.70:0
GET /templates/rt_afterburner2/css-compiled/menu-50c3b08cf0e172f85e85fe4000aaa4c2.css HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=6848
etag: W/"630e16d6-1ac0"
last-modified: Tue, 30 Aug 2022 13:55:34 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kr7Ix9hRkEvMq7hsBkDgbaKbGV1%2FOZ33NbuO60tBWZtSyz71NKPe9NybM%2Bkzpmn3PlYMxRLRRz2gytX91RqoVcRlAcp0nuYdq8qy%2B%2FDPOb2fy2Zt1wC0N7pHwFM2%2BXTM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c42ec3b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/media/system/js/core.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/media/system/js/core.js IP172.67.146.70:0
GET /media/system/js/core.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=4784
etag: W/"627ab5f8-12b0"
last-modified: Tue, 10 May 2022 18:59:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 6239
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GR0eyAHgASWA%2Fo%2F3XSLzWW5cb0oZD8l98NFLdzkSY4HAJzlbbUTVY3sCIEui3AgSW0pTg6pnvis2csOvQ%2FYkrRvUsdaFvsnFSnRZ3FCLNF3W94FM1OYCXFQijDS8HkS0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43ee1b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/modules/mod_roknavmenu/themes/default/js/rokmediaqueries.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/modules/mod_roknavmenu/themes/default/js/rokmediaqueries.js IP172.67.146.70:0
GET /modules/mod_roknavmenu/themes/default/js/rokmediaqueries.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3015
etag: W/"627ab5f8-bc7"
last-modified: Tue, 10 May 2022 18:59:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 2646
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vF0yBVf66KmgFJLxcb76CoCWHjTg%2FLk2cZmgVxrXjV67gtIAhjFsR%2BIcwb%2FbMC9WA3tM5olzge6LJ2REn0s59IHM%2FfvboizWS21Id9SNq5ekJOKqeD%2FwvBusZNT9m54i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43efeb51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/cdn-cgi/rum? | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/cdn-cgi/rum? IP172.67.146.70:0
POST /cdn-cgi/rum? HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 539
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5; __utma=247373057.599866458.1664902805.1664902805.1664902805.1; __utmb=247373057.0.10.1664902805; __utmc=247373057; __utmz=247373057.1664902805.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); _ga=GA1.2.599866458.1664902805; _gid=GA1.2.1759616500.1664902805; _gat_gtag_UA_174142517_1=1; _ym_uid=1664902805340052590; _ym_d=1664902805; _ym_isad=2; _ym_visorc=w
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:12 GMT
content-type: text/plain
access-control-allow-origin: https://topersoft.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 754f78ef6b7ab51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/media/system/js/mootools-more.js | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/media/system/js/mootools-more.js IP172.67.146.70:0
GET /media/system/js/mootools-more.js HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=238331
etag: W/"627ab5f8-3a2fb"
last-modified: Tue, 10 May 2022 18:59:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 5352
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DkcMiGEzlpH%2B7VTCfyw1kTgc%2BFYDOPJb9wrgulvoRiZT3EWZWdYepNkwK1jC9rM31OSGZNlHrHp%2FvoabIMQx4bv1X55%2BF85Zg9%2F74BD9lrb8bXBgXuhRbT%2BqnenJfTOJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78c43eeab51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn-topersoft.nl/download/programs/goodbyedpi.0.2.2-launcher.ver-5.6.zip | 172.67.193.224 | 302 Found | 0 B |
URL HTTP/2cdn-topersoft.nl/download/programs/goodbyedpi.0.2.2-launcher.ver-5.6.zip IP172.67.193.224:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /download/programs/goodbyedpi.0.2.2-launcher.ver-5.6.zip HTTP/1.1
Host: cdn-topersoft.nl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 04 Oct 2022 17:00:04 GMT
content-type: text/html; charset=iso-8859-1
location: https://topersoft.com/404
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vaAD4H8TEe3YBUm%2BVPyEH8ooQzMNBJroH85fFQfr1c2WCWRAKhC3pktWE%2F5RRaOqdVP8bAd3fpY1CnwZV1nI8xP3C7kNnCoH2e%2FoF8FGa5XlgFw%2FXUlRuSqwrbIG3Vz9rH0Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754f78b94bc81bfe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| topersoft.com/404 | 172.67.146.70 | 200 OK | 0 B |
IP172.67.146.70:0
GET /404 HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/html; charset=utf-8
x-powered-by: PHP/5.6.40
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
x-content-encoded-by: Joomla! 2.5
cache-control: no-cache
pragma: no-cache
set-cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5; path=TOPER
x-power-supply-by: 220 Volt
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ktz3dz7baEL%2FpaG1%2F6rMSou61d%2Fewn04hdzlAvnUqAdNqHMYD7tY88h8wxEpoUEjPRI6XeAfXaEnZvdooTwJuvkuUPOVzfw80dD%2FR82pL0VXZMxl65r3Q7KOpRFzHySy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754f78c22bb3b51e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| topersoft.com/cdn-cgi/rum? | 172.67.146.70 | 200 OK | 0 B |
URL HTTP/2topersoft.com/cdn-cgi/rum? IP172.67.146.70:0
POST /cdn-cgi/rum? HTTP/1.1
Host: topersoft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1076
Origin: https://topersoft.com
Connection: keep-alive
Referer: https://topersoft.com/404
Cookie: 2d830d293d64e02257de6895266d0b23=5aj9nqsulfgf5hmms5u7n5mvm5; __utma=247373057.599866458.1664902805.1664902805.1664902805.1; __utmb=247373057.0.10.1664902805; __utmc=247373057; __utmz=247373057.1664902805.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); _ga=GA1.2.599866458.1664902805; _gid=GA1.2.1759616500.1664902805; _gat_gtag_UA_174142517_1=1; _ym_uid=1664902805340052590; _ym_d=1664902805
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 17:00:05 GMT
content-type: text/plain
access-control-allow-origin: https://topersoft.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 754f78c94fcfb51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
104.21.60.79