Overview

URLkozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992
IP 104.21.86.10 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-08 02:54:49 UTC
StatusLoading report..
IDS alerts0
Blocklist alert35
urlquery alerts No alerts detected
Tags None

Domain Summary (17)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.erbp.ru (1) 0 2013-05-06 10:49:07 UTC 2022-10-27 17:09:43 UTC 92.50.171.106 Unknown ranking
fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-11-08 02:16:10 UTC 142.250.74.10
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 35.165.41.15
e1.o.lencr.org (2) 6159 No data No data 23.36.77.32
kozbanov-lawyer.ru (61) 0 2019-01-11 23:59:19 UTC 2022-11-08 01:08:17 UTC 104.21.86.10 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-07 05:46:18 UTC 34.117.237.239
ocsp.pki.goog (9) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
counter.yadro.ru (2) 7275 2014-09-09 18:41:17 UTC 2022-11-07 06:00:12 UTC 88.212.201.204
ocsp2.globalsign.com (1) 1544 2012-05-23 18:10:04 UTC 2020-03-15 21:19:16 UTC 151.101.86.133
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
partnerforce.ru (1) 0 2017-03-08 07:57:08 UTC 2022-11-05 03:36:03 UTC 172.67.217.192 Unknown ranking
r3.o.lencr.org (6) 344 No data No data 23.36.76.226
fonts.gstatic.com (4) 0 2014-09-09 00:40:21 UTC 2022-11-08 00:49:40 UTC 216.58.207.195 Domain (gstatic.com) ranked at: 540
ocsp.digicert.com (2) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
cdnjs.cloudflare.com (2) 235 2015-04-17 20:46:33 UTC 2022-11-07 07:26:05 UTC 104.17.25.14
www.foxmag.ru (2) 0 2014-10-18 15:31:58 UTC 2022-11-07 13:04:27 UTC 178.21.10.110 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-08 2 kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-an (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/css/grid-responsive.css?v (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/plugins/contact-form-7/includes/css/styles.cs (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/plugins/table-of-contents-plus/screen.min.css (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/css/master-gecko.css?ver=1.0.1 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/css/bootstrap.css?ver=1.0.1 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/css/master-3a9d5bbe25fa4c (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/css/menu-dropdown-directi (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/plugins/wp-special-textboxes/css/stb-core.css (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/plugins/wordpress-23-related-posts-plugin/sta (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/plugins/contact-form-7/includes/js/scripts.js (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/plugins/table-of-contents-plus/front.min.js?v (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/demo-3a9d5bbe25fa4ce5b9fe (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/navigation.js?ver=20151215 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/skip-link-focus-fix.js (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/mediaqueries.css?ver=1.0.1 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/jquery-noconflict.js?v (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/jquery.min.js?ver=20151215 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/caption.js?ver=20151215 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/mootools-core.js?ver=2 (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/core.js?ver=20151215 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/mootools-more.js?ver=2 (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/rt-parallax.js?ver=20151215 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/chart.js?ver=20151215 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/rokmediaqueries1.js?ve (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/sidemenu.js?ver=20151215 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/js/rokajaxsearch.js?ver=2 (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-includes/js/jquery/ui/effect.min.js?ver=1.11.4 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/plugins/wp-special-textboxes/js/wstb.min.js?v (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-includes/js/jquery/ui/effect-blind.min.js?ver=1.11.4 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-includes/js/wp-embed.min.js?ver=4.9.8 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-includes/js/wp-emoji-release.min.js?ver=4.9.8 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/demo-3a9d5bbe25fa4ce5b9fe (...) Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/themes/casino-theme/mediaqueries.css?ver=1.0.1 Phishing
2022-11-08 2 kozbanov-lawyer.ru/wp-content/libraries/gantry/assets/jui/fonts/font-awesom (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.21.86.10
Date UQ / IDS / BL URL IP
2023-01-28 03:38:59 +0000 0 - 2 - 0 metabolicpoised.top/01a4eEZ6cXoHX1xHYCpYAg5_f (...) 104.21.86.10
2022-12-16 03:14:03 +0000 0 - 0 - 35 kozbanov-lawyer.ru/zajm-pod-zalog-nedvizhimos (...) 104.21.86.10
2022-11-27 05:28:31 +0000 0 - 0 - 35 kozbanov-lawyer.ru/vozvrata-v-apteke-kak-resh (...) 104.21.86.10
2022-11-27 02:42:14 +0000 0 - 0 - 32 kozbanov-lawyer.ru/kak-zaregistrirovat-ispoln (...) 104.21.86.10
2022-11-27 01:26:36 +0000 0 - 0 - 34 kozbanov-lawyer.ru/voiskovaja-chast-02511-kam (...) 104.21.86.10


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-03-31 09:39:33 +0000 0 - 0 - 4 cxjqwihiz.lspower.xyz/usps/verification.html 188.114.97.1
2023-03-31 09:39:27 +0000 0 - 1 - 0 www.zalkkweet.com/BCSQZXDD/GDPPSNP/?__efq=_Zs (...) 172.67.137.242
2023-03-31 09:39:23 +0000 0 - 1 - 0 static-res.playit2019.com/playit/pc/exe/playi (...) 104.18.13.35
2023-03-31 09:37:35 +0000 0 - 1 - 0 update.minecraftonly.ru/files/MinecraftOnly.e (...) 172.67.71.10
2023-03-31 09:36:54 +0000 0 - 1 - 0 static-res.playit2019.com/playit/pc/exe/playi (...) 104.18.13.35


Last 5 reports on domain: kozbanov-lawyer.ru
Date UQ / IDS / BL URL IP
2023-03-25 00:54:01 +0000 0 - 0 - 36 kozbanov-lawyer.ru/zajavlenie-na-peredachu-v- (...) 188.114.97.1
2023-03-14 05:25:50 +0000 0 - 0 - 1 kozbanov-lawyer.ru/prikaz-ob-utverzhdenii-pol (...) 172.67.213.187
2023-03-08 07:22:20 +0000 0 - 0 - 33 kozbanov-lawyer.ru/novogodnie-podarki-4000-vh (...) 188.114.96.1
2023-03-08 03:00:01 +0000 0 - 0 - 35 kozbanov-lawyer.ru/vidy-gipotezy-dispozicii-i (...) 188.114.96.1
2023-02-22 07:27:31 +0000 0 - 0 - 34 kozbanov-lawyer.ru/rasschitat-kolichestvo-dne (...) 172.67.213.187


No other reports with similar screenshot

JavaScript

Executed Scripts (35)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 393) - SHA256: e56f08b62d5a5a7904bd730bdbd303700b812e3dba63fcff8ac5a8257c380042
< a href = '//www.liveinternet.ru/click'
target = _blank > < img src = '//counter.yadro.ru/hit?t26.18;r;s1280*1024*24;uhttp%3A//kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992;0.29649876464690295'
alt = ''
title = 'LiveInternet: �������� ����� ����������� �� �������'
border = '0'
width = '0'
height = '0' > < /a>


HTTP Transactions (104)


Request Response
                                        
                                            GET /est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Cache-Status: HIT
X-Cache-Skip: 000
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z3JicaO4WE9AfPULpy4%2FmBbnx7crm4C%2FRniCHrpbmHx9V9Qd0oS9ptl5C0EZ1S1%2BgmZmjJtM0m87GLt4hJRPbdax6u3K4UWf%2BbTx2yTnmPf9HL1m7JVJiXPPqbdcwDy4c27qHlc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 766b066f699f0b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (20374), with CRLF, LF line terminators
Size:   14520
Md5:    5fb125abada4024aa3194bdcefded0d2
Sha1:   a56fd86e5d3ebf5dff2423a0981ad5b767fe16d1
Sha256: b16a0fcc03294a914dac6d88fe9e6f3d2e6354ea0800bbfbeac0c726935911bd

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7860552382285E6EDDDDC5226C6F6400CAA3F6FC3CB4B8A2D550C6FC653F78BB"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4845
Expires: Tue, 08 Nov 2022 04:15:23 GMT
Date: Tue, 08 Nov 2022 02:54:38 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4184
Cache-Control: max-age=117984
Date: Tue, 08 Nov 2022 02:54:38 GMT
Etag: "6368de76-1d7"
Expires: Wed, 09 Nov 2022 11:41:02 GMT
Last-Modified: Mon, 07 Nov 2022 10:31:18 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DF8B8CE7A83D11FBE075C8780103C509654F288B5D757D64B696D861A11F3C7F"
Last-Modified: Sun, 06 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10934
Expires: Tue, 08 Nov 2022 05:56:52 GMT
Date: Tue, 08 Nov 2022 02:54:38 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: spc75RdG91gDNieLzQtw4qeOOIv5+o/Wu0JC4aoNuS6362pjPQWH6mNOHEI9xTc3VYmwuoEAspi13Rz0buUGWg==
x-amz-request-id: 23TQBBNTXEGEGEW6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 08 Nov 2022 02:48:20 GMT
age: 378
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /wp-content/themes/casino-theme/css/grid-responsive.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:02 GMT
ETag: W/"5e4d72f2-153e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=19ApIydz8VjRELN%2F%2FYtcCyo4M7bBkKYfw2TZfpJT21Mx5OfQhecia3qW7l6qhYRx7DlZGyOtiEo9XXupK0sSi5VL3gsdWL4j5Q3AIPAeIThvaXWDmEgjEStyzFgiUUby9zHHSDM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06719d6b0af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   1154
Md5:    71cbbc2b4b75d38fde4164930c4b1a5f
Sha1:   bc669826f776560c05ed95d509c6048a4e731ff1
Sha256: c6f60ff63ea7e00e90f3db1812ab9600d24f17a153f923db3e5fbaa31ed3342c

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:30:56 GMT
ETag: W/"5c125100-6cf"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4723
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9gei2km%2B1dkpLgohvb9u1RmGbQqbx8sWakybNjT5RAe8BIC%2BcCs8IH75Li5eEI0aSGjtkZne9TvWwq%2FLEzdcsN91ZZISCZphwJT0LWkxSG6VF4c3wkWhZbxf5HOxa2C2fkAaoOM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06719ec4b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   676
Md5:    aed6d7df00952fe5e2c7c636649262f6
Sha1:   7d27a3280224fa23a11af27e6816ba0a49ab5d70
Sha256: 06c5b0cd3f5177c83dc46e5fa8aca26cd4c79f9a3a256cfd03352c129039fdf6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Tue, 08 Nov 2022 02:54:38 GMT
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 469622
expires: Sun, 29 Oct 2023 02:54:38 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=93QaqrkHVVdU%2FMXlq1RLpJ0zqn7rnGqWj2EhRYL33ca9rteUP%2Fv8jGQOhmOHNDcS5BjU%2FHJZh0MjLA%2FmTjKWkPP8fSC%2FyXepHLQpwBQIerWyIGwRRHK2FcRStF30XsN2REEWD1Ww"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 766b0671a9deb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   5631
Md5:    109d1ed85cd01f9cdab73a4cac5bf80d
Sha1:   d6c6498ad46de2d8e2008a8ff68e364ae7f16b32
Sha256: 8b3a74fe462f5b3c0635995fd721a60eb640e237680b0b532b96711f2823e8bc
                                        
                                            GET /wp-content/themes/casino-theme/style.css?ver=4.9.8 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:19 GMT
ETag: W/"5e4d7303-330"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4723
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=di18ZjI1%2FHrNZydow8Bkn22xXpWtesb7l86J8U%2BO%2FCc9BtKmvFIu9ckKIf1oEUwt0xHBrYLaUBLf6hNX3a0p%2FtqLiHZzHQSB05WkroOWZUZq3qWf1S6Eo%2FTG6clSk28067JgGJQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06719fc5b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   474
Md5:    64512c3158a4553e2793a93d47c71224
Sha1:   51c04d04a577de6c3ebae959d392d8d49b906733
Sha256: be702a318efa54999935c28540445356ecfbba55d3ffc14776ae15e92f3a18b7
                                        
                                            GET /wp-content/plugins/table-of-contents-plus/screen.min.css?ver=1509 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:32:13 GMT
ETag: W/"5c12514d-484"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4723
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BzZGMjgoR%2Bjpo4EWjNhZm3XgsiQFCOItK7nzzzsnxN9SwtK05clD5IioGQ3cLx3AHqBUVPUyiF2TjG6VVR%2BSfVEOLZ4D9d8FcN86UZ044r767NN5ec6itSnk%2BV1DdGgvPsXjXbs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06719bb2b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1156), with no line terminators
Size:   451
Md5:    9cbb12ded165859b75441a829fb683af
Sha1:   1e85f7bd7f0fa9dbc53157bbead5eb703c502db8
Sha256: 3dba212407392e05ef866072e63f519c9ef7365ea376cb5a8824e77726a6759b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/css/master-gecko.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:02 GMT
ETag: W/"5e4d72f2-147"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4723
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cg7U9R6aN5pW3E87r079qwjCDUYtMx6g8b3gr2Mu90Y%2F77Zf7bYzj3bStL%2BANFQUTbk2W6GByXX84BBTn9xn6gykgErIbUeFMUoUTq8c%2F8hNd%2FK2diNdQcNl%2BjTIOazYDqeQWG8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671aeccb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   237
Md5:    42b856f70401792ff61ce39f0d15187e
Sha1:   d89f7caec9972737f77b4d6effc214e5ddc6e8c6
Sha256: 498fb25e1b77547c448f19fbbec16747f9ad3ffede9e65af1df28e6b51e7c7c5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/css/bootstrap.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:02 GMT
ETag: W/"5e4d72f2-1a1f0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4723
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s31V0%2FPT83f8fQZhSK%2FJX8ClVy%2FplsuEmmWG5aVmDSBoKg9s1KPk28N7jhFwRButRZ23h%2BdMcBpzTJiH%2F5OEBgmR5PB6xFiAr%2FIGiIbfxvn9o0%2BgJHsqEEcsR8KRVA6JoNffhvw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06719d8eb521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   18403
Md5:    8ccc3caeb4d179c7411ced0d453568d2
Sha1:   24f7e038de1ff25d1d5640880a0dcc2a35a6c9ca
Sha256: 0f597bf99dcbb112a2ed509e8883f79ff735b518157dad9cfb59a6d685e8b144

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/css/master-3a9d5bbe25fa4ce5b9fec2f02ef5f866.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:02 GMT
ETag: W/"5e4d72f2-2613e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4723
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yv%2FZ6AadUJExAftEV903ShcHUvUG1c4STi0i1HHiqMIYH%2FT%2FP4WyqdkqkQpLF%2BffCuZHDoOiB4pQu1ssYzpOFLaHq7HKeQK4CVLLpa95EFCC1WZPlqch7%2BotBq9VEY0IiEgORmM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671ad710af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   20700
Md5:    dd9634fd6b76b33a1ecc722ec66c6594
Sha1:   60cde4939736097ec7dc5001e889635bcf60f2b7
Sha256: 514351d0c268660be9fa9a34578c4146032b70f5835f6ecd4bf6b12b673cf14d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/css/menu-dropdown-direction.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:02 GMT
ETag: W/"5e4d72f2-5ef"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4723
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pu7AleLqGKvoyVsZtgswijRTEJRldsKVhJ9Bt5zyvTZWSduouroYsaNe%2B3SXrP%2BgGvtW7nzMH6xhf%2Ft9SSJRpq9FLz11ug%2BXuPMZ8aKIrMqlPG50f%2B2QFbduLEoOHFD%2BwfVr13Q%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671ced8b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1519), with no line terminators
Size:   310
Md5:    d73a797f7592ab9bce3849ab5737817e
Sha1:   9423b36627b10be53d0806fadfe6c8d8d68f9e71
Sha256: f7d7f8fbdf96b9b72d137ad3ea7ad6bfbd9b935b04f697d60d9ee4600b9478c5

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/css/menu.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:03 GMT
ETag: W/"5e4d72f3-2d4a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9kux%2BKey%2BvvspG8i11Cn2oRohCcXQz9cpfZzhhhSsGvxBpzFPsTQ6TWEYf8XWj7iYfmwpLj57jmPF4rns5b3Ap1W1sAAfxBVmAQEbqfLddV8Zzo8NaZEVqLSoaG43QbjG53MIbU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671cd9ab521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (11594), with no line terminators
Size:   2188
Md5:    d0c9fed4ee25a9901b0075392fced627
Sha1:   8e15174d523c566ecd24b03bd6f64284b3bb89bc
Sha256: 6707a90e066997a1a63b069a02ac745de76a5d85468aad53e9a773874f7b522e
                                        
                                            GET /wp-content/plugins/wp-special-textboxes/css/stb-core.css?ver=5.9.107 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:32:27 GMT
ETag: W/"5c12515b-e8a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wdZfJZ6D8%2B8mLKeWeraxQAPsgiom9bMgT79Z5XMisQCBMu3XBswJKvmoECMFMl4czQLE5VlzQ%2B8wCE1KMpxrI0%2BELxJjs75EWWr7p4fN7vE8ovFG8JAd6bBvQiyDxUW87oplUz0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671cedcb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   792
Md5:    28e92d0115685376ea13f80d4624cd77
Sha1:   5c49d2ba210b35e9d558c6cf13a5bccaaa950ed8
Sha256: 482f6d092f111156af642386342ff908983668446198cb59289e92180312dc86

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/jquery.js?ver=1.12.4 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:33:01 GMT
ETag: W/"5c12517d-17ba0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hwURjyKSvtaI8BaczhxwjDNGSmLNU6woAE1PxGZxe%2FInok3bkTTQ2UPEEUBML0S4GICuYsAxzPnyfslma%2FT2DkgiNbXXWzLod2dhsvsm38OUwT4s%2FsQBpxT62g2V5KZCIyaUFZI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671cd9eb521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (32077)
Size:   33789
Md5:    3a80fc6d5f853164f2f53a98659c0c21
Sha1:   3327cc9fd1e64d96894c1322e3ef52dea7fe4cf1
Sha256: c390de9d0d8953f70b165680d6122a3fc871006c67a676030596a4c36e882674
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 08 Nov 2022 02:54:38 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:33:01 GMT
ETag: W/"5c12517d-2748"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2%2Blq7Qot08V0saMn5gE%2Fx%2FSzIIqgLgfroS9aN0cnGeSY9SGNC9nr2%2FzJZvkkES0h4YF20oZAURY8hdMFuZre0KKOQ1%2FM4zqKtcLkhbcKs%2FbwfeRtZaggMroH%2FAVd9M391mjPW4U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671dee4b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   4034
Md5:    2f89b08855471c7476435ce0bec33ba7
Sha1:   970533f152623df03b5fc6fb793b21889e4e0349
Sha256: d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
                                        
                                            GET /wp-content/plugins/wordpress-23-related-posts-plugin/static/themes/twocolumns.css?version=3.6.4 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 25 May 2018 08:00:30 GMT
ETag: W/"5b07c29e-881"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C1a6IDZzTF7iBAOL8By45AZRda3pro9O4anJwcnoCuhHdC5WNpZ9XdJMNtbRlDonlWbKju0gRM0qOHpqa1YpDBY31t%2BH41J5zNyS6inWdT4jR5Q24cfeZ3fBOjBEDRcXy0ZV%2FFg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06720db2b521-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   589
Md5:    b1e45bf9bcd536be8008b443608c6c6b
Sha1:   0d22ff7469317a36f82f2b6274c9c791daa21b24
Sha256: e140ee41b7a34f1a34911b6cd5c933673469cbd4f60777f23c1e4d82e810bfa3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /templates/rt_vermilion/css/systems.css HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7dqfYu%2BrVKdxF5g71FTdhRld7aYEKauY8jewHOmg1C%2F89RNBjr5EnCvPInuRDonlHBPPXDv3sMBk7UCgPnOA6U3LReRkZOIUFXkTyOYJJzY7cue8%2FFpnNywGzKH8bChXrke%2Ft8k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b067179fe0b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   627
Md5:    c95b644b53c4bce1ead22a9708a5eeac
Sha1:   075ad54e440562674721bca80c6deed23d1a084d
Sha256: ef94074762d3397c8ec71b8bdb94993543cb4d33c618453f135741d49ba2c704
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:30:59 GMT
ETag: W/"5c125103-38f9"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2HB%2FUkVlu4UC4TTuoMsvulsPTr73a1960MRK00QhicY%2B%2Br9%2B9e0syXp7CZsXhaH0i7%2B7Yfui74JJj1y2OGQKbNVsj%2FLUHc3dAkO8a%2FxVaQ4eXNn7%2FKZ42YfySWXcGZm0mOysMfY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06723a1e0b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   4031
Md5:    e0e4b1426b3215295e18e962a7d55f92
Sha1:   05ea8fd2d6c296a08cfa892650b84408ff473e7c
Sha256: 7551622c8e60a0bc7ea9f97ec1d26e7706618d171b4edc99ed8276872e231970

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/table-of-contents-plus/front.min.js?ver=1509 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:32:10 GMT
ETag: W/"5c12514a-17cb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o5KFu5L57UkGYu%2BacVay%2FkikLSFl1AvBPzX7Qa9FC0OciK4EIegSH6%2FWIleHeFaCIdJyeP%2FzDkYPy0nwAl3ZcZpaupTe2Ql5%2BQgKXtK9OYWJmOU36nN4LInxhHbogB41R2G4x5k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06723a2d0b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (6091), with no line terminators
Size:   2339
Md5:    4f4a997bc181498157d148ba9b649949
Sha1:   87ff26f8385fcf11c28fcc40c2e5619a8138f44d
Sha256: fe722eb1adc5eb6c3642f87ba188bfb0b899130719fd73381712d6d710d3ed4b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/demo-3a9d5bbe25fa4ce5b9fec2f02ef5f866.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2oBehddw0pQksfVsScK9Bta%2BPVejjYx7E41kfcIrZ%2BH9YNsS8a1iPM01dNdNIG1RfGCq90WW40tbwJwrXAXJqJmp7I8elVvW3TYlwvswvXhABS%2BwdTlAjMZ4TsujLMidXMv483s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671bfd5b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   627
Md5:    c95b644b53c4bce1ead22a9708a5eeac
Sha1:   075ad54e440562674721bca80c6deed23d1a084d
Sha256: ef94074762d3397c8ec71b8bdb94993543cb4d33c618453f135741d49ba2c704

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/navigation.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-b97"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ihZrZiSb%2BjdD1x7c7s9r2RbHeaGkCAa2xhja62mcoTABU15bxTyMfyxi0iYTa2mxcQtXdJYa3u6ToKYoV%2Fh3ekTgocU8vJsr7SnAmLCSdfWHMC5pf%2FlJsaWZ9O0b1paa3VtOQvA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06726a370b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   1096
Md5:    8da166d76095153623e6bb934ef7525e
Sha1:   e5d0c5d545b3552dd5bf200f29e8f2c8e77ab221
Sha256: 56d5b07b11a2624298632471d166c6197da8a64a9d85d412efe32cc25cf8557c

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:19 GMT
ETag: W/"5e4d7303-2ad"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XqTQt6xFbaHCATMTFh%2BZsomU9lpDp%2FMcMAmWnK4%2BigDTC0GHrIQ3wvnBSMW7eKXynfUXej9UHgBSxC7nthFPd2HUFUUEWB%2FqEvjX1Y2hiRQBq2h9CeQU0fBRG285MycOqFfhT8Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06726816b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   416
Md5:    a58187e217f4b2ee9cd10e8954eda607
Sha1:   49f6e0418c24f410db3a8c8681a7d98455d15e9d
Sha256: 69bf8d27242351ec81cf610c4d994e047c2ab1b5868b9e252596eee0a3d6d278

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/mediaqueries.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1NWtSZa0KJWfhjUw0ZtuR%2FS9%2BPEikKRBQ367LcTyXbhHAIuY3tsbvuhDoximiXJMhstOiOWwlcUa5oLDinT1qjiws6PY1GEHgqUEiNIyFbomCVdek%2FsfLmu044AiTxq5juhAXHk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671bbc8b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   627
Md5:    c95b644b53c4bce1ead22a9708a5eeac
Sha1:   075ad54e440562674721bca80c6deed23d1a084d
Sha256: ef94074762d3397c8ec71b8bdb94993543cb4d33c618453f135741d49ba2c704

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/css/edit.css?ver=1553001045 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:02 GMT
ETag: W/"5e4d72f2-eb2"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iCG%2BCmlI0kxF57M3MIzFAj75p0LbTeLDpskUV4YBk3GZwR%2BVwPSHEPS1Uzc%2BpfSr6lwAif7kXWakgYPfRfdISeHCtBkVCNDkV1XPh0Opjp6gxmZTt1gXPA%2BO2o1yW3ANZkAxd2k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0671cd760af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (390), with CRLF line terminators
Size:   1213
Md5:    36d221b51828ef8bbcf62f1c250ddeba
Sha1:   8276b7312f88f9e7d66bc9f68deb1ac29e7eda5b
Sha256: ebc9fa2711b97b9ae51a1e8bf173a46a74007041bf642614685ba36dda0717f7
                                        
                                            GET /wp-content/themes/casino-theme/js/jquery-migrate.min.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-2748"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NhrKbaWcOn%2BT2oyAyJSPRKI0avv8LWiMsSaNbbiYOMQKvKo0W%2Bi2HoOwjbDNH3j0nVGSX1S5TcgJdf9bIKj43nZIhoTKBsGWSN8yCZ9PZLBxkMqe0bV0Ykj9TIbN5lgG6qRzfn4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06727c2db511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (9959)
Size:   4034
Md5:    2f89b08855471c7476435ce0bec33ba7
Sha1:   970533f152623df03b5fc6fb793b21889e4e0349
Sha256: d200586b6dd1ff779b6c30947361ff736e076d8c7d502505ab3174ca33455ea0
                                        
                                            GET /wp-content/themes/casino-theme/js/jquery-noconflict.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 21
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: "5e4d7302-15"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iqttyHcm%2BfH%2FhB%2B1nGP44trzsw7k7BhXZoIBNrMfjXM5sgVjL%2Bj8jb98rEuf6AWuvTLXOtfjHMGcj8o3Jml3w29MsYfuS%2BcssoAJKkDuoAnuKhGsxy8SzhwiKP0gF7Tzk6fC5VU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0672682cb506-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   21
Md5:    e2060c4e5e5955c824723b13a212d3ec
Sha1:   18420ce484978f8ba3d7371febf1638828bb7a67
Sha256: 5b6cf4e6eda02f7c90b60b3c32413c0851915f8f80a268a913b92929085132a6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/jquery.min.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-17b8b"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TM75tjs72VNiZMK%2FkY1sBbiiEmFjpBHCVTAq1%2FCKXFpS6hxdH8Tfthw17F3Vvbozgl0AbJQxw%2B0QJ4aSWERwK3%2BKTQ7wEz6CFzb9a3EMox1ZkVOhnkZgu8PrWHLkWL8gAgwXBo0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06726a380b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (32077)
Size:   33782
Md5:    bcf328167425e857c585773a83f0a9f1
Sha1:   5bf83602f9bb9607edba90a4564c8aa81e09c291
Sha256: 994b0b39c149e2a731357570951341f99d2f50cb1c7e1588e8ff30b665d4136e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/caption.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-1eb"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sfTYmTWet6FqDzPjPiufU55ZaHm682na9%2BnAe6a3RQ5PQOFACtSR042hE2m9UQNbKT68wtOlLF4RuHfQRIf%2B3KX0x0DSgEvnac7TS3zD%2BiYSAXWPlwJOsEgFhoc6k7SmBgHPEA8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06727d940af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (413)
Size:   334
Md5:    67dcbc30fcfad1892362b21170522298
Sha1:   3ff742e04689a2cad78f844f1b76d457bdb72ca5
Sha256: 81c52b778cf87c87d1569c8fc4229d226eaab8e86833d315ec48b48be074fba1

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/mootools-core.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-147b5"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MNES1vAPAPXdJHstC34Da3iRTMeJ1pjC%2FZSDG9dVAUZgRsjCjoKuub9AQsaCwGz0menmq0dTqj0JPNe%2BMCmBAibeZkrig7L7jibWS9%2BJSe6BjWNFFn%2B9ktnJg%2B546nch99SZOyk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06727c30b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (785)
Size:   26973
Md5:    4c23651950610db3ab0eebcf75eafe08
Sha1:   78bc489136a6d10bfbf2e2a17ede591d5049ab95
Sha256: 51e3113569751f8acb6086c37fe8af13e9779e0538912531daed843f895e5dc6

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/core.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-1e12"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wNW8Fz3ROZM8j4zdSGUQ7VTT327d0SQH2d1dzanqIr4wQq%2F%2FODhf2AgLE%2FNNxGd86gaepCty7d%2FIec5w7GYfZ9okSSZGVzxy52laRO%2Bi2XhLr%2BuzH0zgYLUPWgnEVwbYUSivZbs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06727832b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (7693), with no line terminators
Size:   3115
Md5:    645f05a74c3c52b4f27a5b44c794fa18
Sha1:   aef324d8d1e2faae36686e6dbb12bcfd080c90de
Sha256: 186313e5cf49316a4816403a527482e2063027ab8711b2f7e77ee5d4c4ab83b8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/mootools-more.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-39d19"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ScrpZ96ijj9f5gGN%2BLw1qoMIFSsClWF2CmkVqQm0XqgtWeOh4uU0Q8YnB1jf8qy0KWxUTVBWybZ%2Fee0punBKQmujRt1qCPU643xYsMl%2FSVnREYg8VTSidPgE6PXKbE%2BnFlb%2FhO8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06728a3b0b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2903)
Size:   68007
Md5:    ae2d2eb322f5b11a8cf9b87e102212c5
Sha1:   7a27aee33f8cde60c36ab776156e4816aa141ef9
Sha256: dc69b934843a0073d6b6c1125536775cd92a41d21ce2160a1ed2d7cfe1de490d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/rt-parallax.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-397"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S8X80bgfxvkDR%2BE6v%2Bg%2BEmHAqurxAr%2BE8ktrN65pVzva%2FjsDJF5geAsV8tcYEakhSFY2b0bg2FB8Ggwz8y27uTr1Y7YDfjJ%2FxpL%2FPRIv4qUf09xZp76cXcgU77n4kFamKp%2FO9Q8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06728d960af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   387
Md5:    5b2eeac89cca9a738e26f2c45ca3b316
Sha1:   d3656cfa2054381a5c75c1edef82c379d48a46bb
Sha256: 400e83ee529ee06858a97b364dd9d9db8a65febfafab9334c602dc37cefdc016

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/chart.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-4d31"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KhGsDOFIvA7MqCsdoB0ettkWcsdLebiKf%2Firy%2BRy1Q9l4POZ5MEyeodwImQLpTZpyXq1sqCrG2uniq8emC5qcfdz8oYuhsr9ViHlQANGtEa2ngYqJW45g0Ikzl%2BIIB2OxJyPE7U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0672ec5eb511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (536)
Size:   4527
Md5:    76ee9e365261a3cf2b0fd565d601b8ef
Sha1:   822164a3fb51ffb55a5c3356f1a79a29df58a600
Sha256: 264d38df92f6e62b140f92c260ac96af2e210429c40d7b19971313cfccd77af2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/gantry-totop.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-ff"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yjoaHdEroBxk5HBYLLO%2Bz8fQJLdjrGtP7y6LWNmCO9MrNt%2FbJ7vNL3oEoFnmgYMtG197b53BOdmNOswGeJimPXvKzr4bjaYTLJ5JTnbWb%2BIMHucuR%2Fl%2BbMnrqfY244YQ9sGsomQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0672e855b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   187
Md5:    2b2ecc6023c34d28dcf10a7b57cdf412
Sha1:   b5dcb37a2e705625537c8b2c62cd2ad96114fe5d
Sha256: c95d89cd5045462341bd479951e46f511bc198a007e1c3c2f701d3da9d754e7e
                                        
                                            GET /wp-content/themes/casino-theme/js/rokmediaqueries1.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-bc7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aHO7mJx3enD55L7TFODo2QJazwb4K%2F9S5JNhOlQ8vYboSSjSaHffzUXpboVHhg7ud87TAjhP3SZFCl8PZqrbwlZm08jKYBU0OVbb15VwMkYLVNmRRozUnm5V9Oy0rv7OBXgBxKY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06733c76b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   1322
Md5:    6c68a1ba6ceff473fc314ec07549d028
Sha1:   f242990a422188eddb1b50788f9dfc440001d4d8
Sha256: fbb5edd301249c053007eadc8e1baf934937b273438beb9fe123984e4688499a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/sidemenu.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-c12"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wrci%2BCB0AtcBmdVtYTopYuD0k1RId6%2FUifBcwjyxIUOTHXXWdca%2FinnuLUxu40%2FJD1O2I%2B4rlz7ETupn3LlNF7hpGhx67ZaTCggPz4bhFfNKi%2FT%2Fo5Btjy6FSfgjzzenvgSu%2FNU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06733869b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (324)
Size:   1171
Md5:    7adda2b653b829227d343abe1311494c
Sha1:   ff506aca52274fca851f381bd2a2386fd40da4de
Sha256: 2c43bcafef1aee5b49d272f9fe89b0c2c423748e3c3e2f9469d6c7ce64ad9187

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/js/rokmediaqueries.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-1244"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fAvgtMQefOvB%2FNRoJ8Ir1OzzgzI9cJskaYm8%2Bxeu0ltd8KKbVs8ekFjuMLnmB%2BUjEWbMktV9IR9943hT3BAioPdpUtoX4eTXfTpcQoBXeRPvuk%2FbmYHAy8TvxQ6jxxajceOl0HM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06733db00af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text
Size:   1733
Md5:    5da0e9224ce987bb2cd10033c191e565
Sha1:   1c60cc73f9cde5503fd2823b47f55bccdd4a2a59
Sha256: f4742f7e683472498056b4b5aef824a8992b398b82ef5dd8f6fd07e7e423319f
                                        
                                            GET /wp-content/themes/casino-theme/js/rokajaxsearch.js?ver=20151215 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 19 Feb 2020 17:40:18 GMT
ETag: W/"5e4d7302-8521"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3OXAEyA7gS3otFVkdD4uHx2Aju8ZaUm4sosUTSHWbN5n2a9o0IKt%2F4%2BfHB6UwSq8Y36CMC3Cz5iRbhfT7VevrFB8O525df0ZLiWCRKwERvovROyAJPnk8%2FCncaBx2YUFZB0LT7A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06735a690b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text
Size:   6337
Md5:    f3a8d2cf6a5f3c5c972830ad06462b06
Sha1:   04b63feeaf2840606fc82d86f48596b8733d8bba
Sha256: 8ff52ba129497b1cc4827635f0c2576b8af2610d08fb296faf2524cd1492d415

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.11.4 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:33:03 GMT
ETag: W/"5c12517f-346c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5kugUmdrqD1SpmvKxBCBEoiOM3HmRMxduxtcJujjjaPolxK%2FazPjqZzU20QEtZp4PDOSR48VHcr1ngrYT7myHwJc9T8h7VsIAIyPNwAmnY9eDjGw%2BatpNxW%2F6U3%2BhmtjTIKg%2FbI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06735c8db511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (12815)
Size:   5233
Md5:    856be0bcf6f83bda23869b9d928070f9
Sha1:   78ec42aedab08604ab3f9d8a5f604756f160cca2
Sha256: 8b9fa2f42ec45e87a0c573c35583a1f17e99c7558651576a09fe82b0d38eae05

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wp-special-textboxes/js/wstb.min.js?ver=5.9.107 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:32:34 GMT
ETag: W/"5c125162-465"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jFjv2ILBfUyNhM6DvirMnbPn68JrVG5noMMfjFXemNovLByZOL5Ir4rGKWsExBUisb6OgN2QWrCYWM5NiJffUi7QW4bGO5xhXl3LweEscmi7NaiGcc4617Q8tSzHj1Mmu9d%2FSmQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06735dbb0af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1087)
Size:   548
Md5:    72091825ef7903704f9a7eaa0cc1f657
Sha1:   c89609424b128d042711f6a056d6b3b657dccc52
Sha256: 08c73ef9e50d21576593c091ee035966ba02ca5232d71fed2bb5d644cf3a4275

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/jquery/ui/effect-blind.min.js?ver=1.11.4 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:33:03 GMT
ETag: W/"5c12517f-473"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KNgPTxllyI6E1RqqVFvVycobMwSJqWcjJ8AB6xpG8ZSOadD2UY55t1Q%2BAY%2FVxmMqGQy1zJ9EJclezc3swE3H%2BoMhVm7LE52700R%2BfHDmEDodSlfYyI60BeHaWRGO%2Bn2JudauFBM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0673587db506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (909)
Size:   651
Md5:    96f627e7798c9def04ee4b1e7714ab6e
Sha1:   4448490e333c96bec60f73524e3cb31632975283
Sha256: b4beccacfc6e0c0dd3d311c6384ab0bfbd19431e8e83241b82bddc7d31ce7fa4

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=4.9.8 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:33:17 GMT
ETag: W/"5c12518d-576"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iw70hsLJvSuVFFysPgQGk8yObnTbHJbgCl3gbgu0HC5tQ9Yl0CJsg3zaK3g1ms48UFeEIuv41v4p84T2vegVFW%2FaSPF1xBsrmE3Pi%2ByT7RIKpKeWr%2FioaeMZOCzEp4%2F%2BUBLS1hA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06736a710b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (1398), with no line terminators
Size:   756
Md5:    77ce65aa27658b26944312e742e1d204
Sha1:   952f595220a39db2f6c8e65c648fa6b1ecf92024
Sha256: 277851a5b1d095133da0244edd6952c2f6fe5ec1b25633812001abb796681616

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/nomera/temnyj.png HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 10965
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 19:48:14 GMT
ETag: "631f8cfe-2ad5"
X-Cache-Skip: 000
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 4721
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ifduO3TvY2OX71p9xZYa%2BKPzzGp0kZmn%2BEaeVN6%2FPBGS%2FtP23jLWM%2FklJRy8Pwt2s91VULCOf3EqAj5D3EM2YWfN74AXKZgqljGidaM9iP5%2BwFaJX7gYR%2BBqIywmG0Lrtb5iSJA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0673dcbbb511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 300 x 175, 8-bit/color RGBA, non-interlaced\012- data
Size:   10965
Md5:    d1f737435cc723c3553584f055a12cdd
Sha1:   7755990090cace7bc9b060b8978f2d582294f531
Sha256: 4a36c501294130673ec66f93c7b153a225960ad42d91aeab997f023aa92d1037
                                        
                                            GET /wp-content/plugins/wp-special-textboxes/themes/stb-metro/warning.png HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 20026
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:32:37 GMT
ETag: "5c125165-4e3a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5D%2BLKyH09Aj8sfRsEl%2FjGCGeRRYErMjjxcasEGBt099lh8vroEdtx%2FJP3JEamDSFZCMmLmL8hgOs2z1Qnbj8sukoyjPzr54nAJKoPRJ%2F%2FeEtRnJLCwsq0aPxiYiIox1ZyskIRSE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0673da8f0b31-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   20026
Md5:    93551a3aa448b291fb298c65875cb86e
Sha1:   b215ea724beb57ed1d73290d86189a384878a629
Sha256: becc186aefcbbc15ac415d868dedfb684539a2e97deb52fcf6aa932833d52185
                                        
                                            GET /wp-content/uploads/nomera/belyj.png HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 11685
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 19:48:14 GMT
ETag: "631f8cfe-2da5"
X-Cache-Skip: 000
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 4721
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O7dQ8UV0FL7hmOjGWEZ79P97Xb5YObFcLvQ88dqWmG60wPAtb0ni2klSjiQ54RhzdVW0nPoC0CrcoS27qhbQR5lP2SR9LGr7bPCaRSdmAnIOwvaXvPZwMf1o3x%2Fq5iTr0ihDAu8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0673ddd80af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 300 x 175, 8-bit/color RGBA, non-interlaced\012- data
Size:   11685
Md5:    c7ab9f734a62dcdd05915b9c6efcb651
Sha1:   bd03a65c70bc1ed2912a4b32c6d7b632601ed508
Sha256: c5a4422379aeaae1188613e1fe0c9743f944e099847f7a47a0f2bf893ec66585
                                        
                                            GET /wp-content/plugins/wordpress-23-related-posts-plugin/static/thumbs/10.jpg HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 2638
Connection: keep-alive
Last-Modified: Fri, 25 May 2018 08:00:30 GMT
ETag: "5b07c29e-a4e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4721
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ddWMx1o0nWHHRXm%2B0tcOUQMNgiSIbQcNxf2vFBnlxUCepeX5EUBgTjKReIZ3vJy4EAtCV5uTxphNZyFfFqDQOwrh6khF1%2BIiteP8R4fFTkPpoPJtykhSucETukewoCNx0AjDCP8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0673ecbeb511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Size:   2638
Md5:    33764e9f983968f74b1ab264cb9184c8
Sha1:   27fb579f179d60d84afc6132deeb1f0a5b782cf2
Sha256: aac61117f0f7db526a77018cf71cf96717ed0e1d2580c7ac4e1d79d072f137bb
                                        
                                            GET /Themes/default/images/Female.gif HTTP/1.1 
Host: www.foxmag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/

search
                                         178.21.10.110
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 91
Last-Modified: Sun, 21 Apr 2019 05:13:19 GMT
Connection: keep-alive
ETag: "5cbbfbef-5b"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 11 x 11\012- data
Size:   91
Md5:    e538eeb506072ee417b0c6e725effee2
Sha1:   d3098aee3c1888afcdd8d6a241b3927f13e85b79
Sha256: bbee60e9134a8983f8e14b7d02a5771cd3bb24fb84e00e51b5de4e6511663e3e
                                        
                                            GET /wp-content/plugins/wp-special-textboxes/themes/stb-metro/info.png HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 18310
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:32:36 GMT
ETag: "5c125164-4786"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4721
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VX0du%2Fh1p4f8BOnlPYslV%2BVQHuLUvlapRnyjr1T3KlnFkSVs4LIodJ4tkWTIvL5Z2nNV%2BZ1VDQsGTksCo4x2x%2BNUmQpXBrVSIkolSndkxa5YJYCoGxN68XbE%2FLxITBSmsK543zI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06740cc5b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   18310
Md5:    8413bf6f1dd2223f3be09256f755c682
Sha1:   2f99d0744f451d7d631fff57510c99ef5a0cfd15
Sha256: bf75418f7c7e4e45ba7c9ef9e2f0ae766660e4290022bbd91ca89116a8111bc7
                                        
                                            GET /Themes/default/images/ip.gif HTTP/1.1 
Host: www.foxmag.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/

search
                                         178.21.10.110
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.12.2
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 210
Last-Modified: Sun, 21 Apr 2019 05:13:21 GMT
Connection: keep-alive
ETag: "5cbbfbf1-d2"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16\012- data
Size:   210
Md5:    fbfcfab7a64717725c462b45beb8cfb9
Sha1:   de399fcf1ff19b7b0201cdb9b4c2d5c2c4f398f7
Sha256: c7228c4b1d5117c795bd8ddaf2670421465569a84ac061543f4755e14c2818c0
                                        
                                            GET /wp-content/plugins/wordpress-23-related-posts-plugin/static/thumbs/5.jpg HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 7346
Connection: keep-alive
Last-Modified: Fri, 25 May 2018 08:00:30 GMT
ETag: "5b07c29e-1cb2"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4721
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FwrOxehuMs%2B3g6nuEKNlMR2mawNrONYCPvcFUWP%2FDYEbbOB0UJw6hyBAF%2FHTsgSrjsgGlLphFzRFYPatUV5%2B19x18qCKXcJtJ3RwZlayt7xEVNRAOhIi%2Fpq%2BjLbZbpHjPRcXzRc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06741cceb511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3\012- data
Size:   7346
Md5:    6ffe430d51d22e42c1c60bb54257890a
Sha1:   65176df4d28ff4662f75b209d2a5e2b2a7bf709a
Sha256: 50a64f26cfaf466f92fad11b097701d16aa3e1aff6e3b6488e2ee268129719e4
                                        
                                            GET /wp-content/plugins/wp-special-textboxes/themes/stb-metro/alert.png HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 15070
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:32:36 GMT
ETag: "5c125164-3ade"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4721
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T2ILs0oHoYeRnnwwe%2BHBccJWsZsUt3S0XhK%2BB9rq4osIS7q5ELzQhacO1zODDkbn08maUD8RV%2BMHVxIgvB3ETrRIH3iSXi24MHmzyJrQoXIk%2FHwZoLJpyH0hUGExljJL5yWMuRA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06742cd3b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   15070
Md5:    464b73a2f6a9663f96380be90087ee51
Sha1:   8e2c879dd21aaf4a9237168483ecd4f229fcdeec
Sha256: 1ed3a52831e8816fe8a7af982270c84b8f2fcd24b2b05991a2ef8997e4409baf
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.8 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:33:18 GMT
ETag: W/"5c12518e-2efa"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2BQ4Q27xyTxgoSka7%2FT2IvXjghgQKUPTtfyzNMkeEWgxJKyd32tGbphyCImzg2LslyofK8NI2LyXRZUld4XWG272BPBx6jgWZi90o4HGOwuCrI838IQrEaxrgCIXHvfBDr45B4M%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06742a9d0b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with very long lines (9118)
Size:   4385
Md5:    753d9a1cd7cc47e65c8b7c21543b1616
Sha1:   c4d57275c339b3b8df1d24124bd10d0926b5575f
Sha256: 8a04b00f98848434b8139a8cede0c5bb33334ea3be64ddd3bfae16977b396a6d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/casino-theme/demo-3a9d5bbe25fa4ce5b9fec2f02ef5f866.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D6sftYFPcb2Dcwg6IjSq%2FXkxFrEbGb93NtE%2FAm7LYRLjkewEd%2FFi09Jo856TSI%2FZw62SHR8ttbnlRA%2FDs6d45WhifdaiI%2FfY%2BOGYr2NWn8G0MwGDZ%2Bj3u9wx%2BqnppTkXtS6t7v0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06742cd7b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   627
Md5:    c95b644b53c4bce1ead22a9708a5eeac
Sha1:   075ad54e440562674721bca80c6deed23d1a084d
Sha256: ef94074762d3397c8ec71b8bdb94993543cb4d33c618453f135741d49ba2c704

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/themes/casino-theme/mediaqueries.css?ver=1.0.1 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3r8EkKkiZjOxHfh1C4dRCs6SBDbzgjMrCWxiO7ZHWFZzl1Ivx8ryTzXcai4YKCSjUFg1phq9AZ3hIv%2FoMgtJCcvZwJXoNjW0s7CtMzDwa7fistZfUDUbwNJkMdBw6P4yVHjtUl8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06743aa00b31-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   627
Md5:    c95b644b53c4bce1ead22a9708a5eeac
Sha1:   075ad54e440562674721bca80c6deed23d1a084d
Sha256: ef94074762d3397c8ec71b8bdb94993543cb4d33c618453f135741d49ba2c704

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /wp-content/plugins/wordpress-23-related-posts-plugin/static/thumbs/3.jpg HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 1027
Connection: keep-alive
Last-Modified: Fri, 25 May 2018 08:00:30 GMT
ETag: "5b07c29e-403"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4722
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k9ZfTeynA%2FtpC3tgTLOFQxzjHvVjcqoAQ8KWSpx0eRZaLPiciiZKzRjMa%2FCVb9dPfnggl7BC1M3oN4cXJTsus94J3W4vfTeNofdAyO4qzlsu3uj85MbOrlkPLmcZpzcYDIKCdx8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06743cddb511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Size:   1027
Md5:    1e196375ebc7ccbfb4c47aeb3734c109
Sha1:   1bfd1466ce267bf0bccc357fdd9e0d3a315c6532
Sha256: 1b7185720d91ae5783fe3b1825bda551f4358b223fc086d19cc1c8f98bd9dd50
                                        
                                            GET /system/main_images/49477/normal/_1.jpg?1466661032 HTTP/1.1 
Host: www.erbp.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         92.50.171.106
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx/1.13.6
date: Tue, 08 Nov 2022 02:54:38 GMT
content-length: 95766
last-modified: Thu, 23 Jun 2016 05:50:34 GMT
etag: "576b78aa-17616"
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 600x400, components 3\012- data
Size:   95766
Md5:    de44fd097b316e6b289d14d36ea582d7
Sha1:   5938b8bc2b00a2b7aa22f60584233a342cdec876
Sha256: 5a48b242d1432fff249035f29c8ad9916a62e1cb8b8a7f919b1c6313876a3bbe
                                        
                                            GET /wp-content/plugins/wordpress-23-related-posts-plugin/static/thumbs/12.jpg HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 1943
Connection: keep-alive
Last-Modified: Fri, 25 May 2018 08:00:30 GMT
ETag: "5b07c29e-797"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fqKfCkgDz5M1ZXM2JiG6jiNuoDg8xtHtcqfxHdoo5sdlzsswZYqHNYBgzK0WNT1MQrugUG2B%2B8PzVX2wexLZsuF76tBQbXDFxZ4kIP4cj6oUBUP5PcekmobKyiZKig3Dy34tE5I%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0673d8bcb506-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Size:   1943
Md5:    4b1bd61886be009037817027551965c4
Sha1:   26709d4aaa2db9d61bd3487f523b4dd5f95607d4
Sha256: 7145823139e9e52f9d4c2495f50f281bad6ced89a5d97fe4daaf073c3eca5e98
                                        
                                            GET /wp-content/plugins/wordpress-23-related-posts-plugin/static/thumbs/28.jpg HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 2638
Connection: keep-alive
Last-Modified: Fri, 25 May 2018 08:00:30 GMT
ETag: "5b07c29e-a4e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GdCIWmnn6RNc4pKyZbU6QxQuIu6oF6d%2BTpRhzlHsr5jLI3pLWWgjoC8Go9nkLILYTW3CpaUNNufe0ZINFIUMmX5EI34CB3af4UCvplsi%2BjzJ5kd7G%2Fa%2FmeHZSvwVobIgEAZB0xc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b0673eddc0af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Size:   2638
Md5:    833f997983311cb98a10fffec567a356
Sha1:   afe4d1f7acfe9885d4cfda1d8d4c055920f432b6
Sha256: 417b2e6356e6352da9783df64b0305b1aa4bb2319a9588c9c4805c3695465e4a
                                        
                                            GET /wp-content/plugins/wordpress-23-related-posts-plugin/static/thumbs/14.jpg HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 642
Connection: keep-alive
Last-Modified: Fri, 25 May 2018 08:00:30 GMT
ETag: "5b07c29e-282"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cCpe7HJhst45lzDJAtvSUPa2PU2OFAyshKR01pbQNYkxLlDQnci%2Fu2qDEElmkS8lyZvnMQE0KL%2FIzFVODu0OszdrMtsUu7I3rJgip%2F25dK6L2Z5zaz0ZPju8DMdGy%2FsmM5t6wQI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06743aa20b31-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Size:   642
Md5:    0e210cb587f549ef14365f11c6a10f16
Sha1:   00e7ff4b7ed4cc14dd46ce4088514cd018eb0e32
Sha256: ced64c6c20d08b2615eab15db79fd3dce49bf146cacbf2701b330b5536c153d5
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/intelly-related-posts/assets/images/simple-arrow.png HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Content-Length: 1286
Connection: keep-alive
Last-Modified: Thu, 13 Dec 2018 12:34:48 GMT
ETag: "5c1251e8-506"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 4721
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B9aw1MmYvpiDfSdiyBvcbAmnZOzrGy%2FoJGcv6%2BirOq2OH%2FbyrbdZP0cdFCqTufB2J5bDg7JomOr%2FqlUlv5C%2FlH%2Bbb3sP%2B1x5wfR9ZsG8UsLMTJwvoTbFq%2FE3ZbEyrYt4N%2BUTEXY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06750e140af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size:   1286
Md5:    006849bd75bbbb96d5b1f5997bbeb52a
Sha1:   21ce90bf8bc0105fe13d635d5f9b8404d8759e82
Sha256: 56c87ee1e1a6878217897741f85a8048012b693a4cb6b03804a322d8fed02a88
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kozbanov-lawyer.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 21:14:39 GMT
expires: Tue, 07 Nov 2023 21:14:39 GMT
cache-control: public, max-age=31536000
age: 20399
last-modified: Mon, 18 Jul 2022 19:24:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 25372, version 1.0\012- data
Size:   25372
Md5:    fe424f96cb627d8b835cb001af17f56e
Sha1:   c5b4368fed99812a99036fba86d01367b5549505
Sha256: 35c92598a5f32c018dc630f57b183b0284c211ce9c222e5b36840a62115262f1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Oswald:300,400,500,600,700&subset=cyrillic HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Nov 2022 02:54:38 GMT
date: Tue, 08 Nov 2022 02:54:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   29040
Md5:    f721de51b27fd57d22f8bde2ad8c8177
Sha1:   1c57336b059b4e3c98b769cfdd847363fa4462d3
Sha256: b8e1ff3b08e6db389493cb61e4dd6a68b377d0e358295cbe919157b40a917f3a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/ptsans/v17/jizaRExUiTo99u79D0KExQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kozbanov-lawyer.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45300
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:27:53 GMT
expires: Thu, 02 Nov 2023 19:27:53 GMT
cache-control: public, max-age=31536000
age: 458805
last-modified: Wed, 27 Apr 2022 16:11:08 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 45300, version 1.0\012- data
Size:   45300
Md5:    5fe660c3a23b871807b0e1d3ee973d23
Sha1:   62a9dd423b30b6ee3ab3dd40d573545d579af10a
Sha256: e13ffa988be59cbf299d7ff68f019f902b60848203ac4990819eb7e4624ee52d
                                        
                                            GET /s/ptsans/v17/jizfRExUiTo99u79B_mh0O6tLQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kozbanov-lawyer.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47048
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Nov 2022 22:54:22 GMT
expires: Sat, 04 Nov 2023 22:54:22 GMT
cache-control: public, max-age=31536000
age: 273616
last-modified: Wed, 27 Apr 2022 16:55:54 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 47048, version 1.0\012- data
Size:   47048
Md5:    87a1556b696ae2cb1a726bd8c4584a2f
Sha1:   1be0f6f39e0cf316f9827f945eeeaef8294cc37b
Sha256: 141f0c53e457585d4ac7426eb3d757666d250ee6fbf0e9c0878128e4c627f0b1
                                        
                                            GET /s/ptsans/v17/jizfRExUiTo99u79B_mh0OqtLQ0Z.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kozbanov-lawyer.ru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 02 Nov 2022 19:39:28 GMT
expires: Thu, 02 Nov 2023 19:39:28 GMT
cache-control: public, max-age=31536000
age: 458110
last-modified: Wed, 27 Apr 2022 16:55:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 29928, version 1.0\012- data
Size:   29928
Md5:    609bea65e2bf8ee9b728a85a8f1b282c
Sha1:   a0d2fbcf012e6554fb8cb182994ec8eb744ab65d
Sha256: 1a045fdc088409e4e87d57617de7a9b613bf251c12997180910faeed8fa7aba1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6380
Cache-Control: max-age=115107
Date: Tue, 08 Nov 2022 02:54:39 GMT
Etag: "6368caa6-1d7"
Expires: Wed, 09 Nov 2022 10:53:06 GMT
Last-Modified: Mon, 07 Nov 2022 09:06:46 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AiiTh3AklUsD8CoCw3wVvw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.165.41.15
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1fsAOY35Fp+TQRsPr/X6DsiYOM0=

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "173373CC60DA9F58C01754B402A42A72E6A4E17B76219B80305EEBE83D86B257"
Last-Modified: Mon, 07 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16837
Expires: Tue, 08 Nov 2022 07:35:16 GMT
Date: Tue, 08 Nov 2022 02:54:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "173373CC60DA9F58C01754B402A42A72E6A4E17B76219B80305EEBE83D86B257"
Last-Modified: Mon, 07 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16837
Expires: Tue, 08 Nov 2022 07:35:16 GMT
Date: Tue, 08 Nov 2022 02:54:39 GMT
Connection: keep-alive

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Tue, 08 Nov 2022 02:54:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 16 Mar 2019 19:53:44 GMT
ETag: W/"5c8d5448-92e"
Expires: Tue, 08 Nov 2022 03:58:49 GMT
Cache-Control: max-age=86400
X-Cache-Skip: 000
CF-Cache-Status: HIT
Age: 82550
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QFaC%2BYovswg%2FYCz7EAn3UPMhI3jCa3vrt0zlmmz7xd0Rj7gtCZT2k9NzJF0cHCpgzf76DKCCJpaT%2BJGzQKcbOThpKvtnnC78LctUnakNLIjYe7BUZTpmTJqPj1pR89qdB2GFw7I%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b067afbabb506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  MS Windows icon resource - 3 icons, 16x16, 16 colors, 16x16, 24 bits/pixel\012- data
Size:   1027
Md5:    f2f1d96f7391d0ea847d0d356514bd4f
Sha1:   26a24c46bfaa5134934265af029bc47d23880379
Sha256: 92a9c2ca41b28538e0e0f90ba277d2f0a24d5406b275a59abbf1f430b7925b1c
                                        
                                            GET /hit?t26.18;r;s1280*1024*24;uhttp%3A//kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992;0.29649876464690295 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/

search
                                         88.212.201.204
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Date: Tue, 08 Nov 2022 02:54:39 GMT
Server: 0W/0.8c
Location: https://counter.yadro.ru/hit?t26.18;r;s1280*1024*24;uhttp%3A//kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992;0.29649876464690295
Content-Length: 32
Expires: Sun, 07 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   32
Md5:    3e9c09a8c5a87f266e047a596f48578c
Sha1:   07d7b1940b7e3f9a3db43197458f9b8ef18a6bce
Sha256: 57fad7ae62012ff4a38ecb6045ac6e8e3a070a33bbd033b21ab6cad3566d9254
                                        
                                            GET /wp-content/libraries/gantry/assets/jui/fonts/font-awesome4/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/wp-content/themes/casino-theme/css/master-3a9d5bbe25fa4ce5b9fec2f02ef5f866.css?ver=1.0.1

search
                                         104.21.86.10
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 08 Nov 2022 02:54:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: max-age=14400, must-revalidate
Link: <http://kozbanov-lawyer.ru/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=efArkF%2FRlK9X9AFaz1wmjup7bUjNT%2F4qpC31X1bstSeso3z2RR1CloMDN7ry4bL8pNlHlti4tFEhlBfDp9mUUnwW0%2BnEAamTM1Aqg2Boy96461lKAxjQPzQunW%2BGMMATxZnfs7E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b06792ef40af6-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (20374), with CRLF, LF line terminators
Size:   41845
Md5:    418303ec8b4c62c6f5f155bbf83443c5
Sha1:   f27333607fff18db8e5a45be8b6fe21ef3c6ba12
Sha256: 67f3da102cd6ed0fa8cd08dace560e40321a7e8dc6b52e02303e0db44602c047

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         151.101.86.133
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Connection: keep-alive
Content-Length: 1423
Server: nginx
Expires: Sat, 12 Nov 2022 00:08:56 GMT
ETag: "eec30e050f26554dfb04b718abb673139fab55c5"
Last-Modified: Tue, 08 Nov 2022 00:08:57 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 08 Nov 2022 02:54:40 GMT
Age: 2712
X-Served-By: cache-qpg1269-QPG, cache-bma1663-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 12, 64
X-Timer: S1667876080.009171,VS0,VE0


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    76a12b8c540585daf277927738f2397e
Sha1:   eec30e050f26554dfb04b718abb673139fab55c5
Sha256: 46961585de54f2f593b7501e94f792ae53681641f3480f2cc22adb5ad3aaa8f1
                                        
                                            GET /hit?t26.18;r;s1280*1024*24;uhttp%3A//kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992;0.29649876464690295 HTTP/1.1 
Host: counter.yadro.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://kozbanov-lawyer.ru/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         88.212.201.204
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.17.9
Date: Tue, 08 Nov 2022 02:54:40 GMT
Content-Length: 111
Connection: keep-alive
Expires: Sun, 07 Nov 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400


--- Additional Info ---
Magic:  GIF image data, version 87a, 88 x 15\012- data
Size:   111
Md5:    43af276eefaf4f8c43f9d1205ed559b0
Sha1:   0f538bb412beae5e68af2a10e782e681b0fc3a45
Sha256: 49f818c3bf653b785505eb4582687ef1b6d2bd0a208b6c975bba742c768bb91b
                                        
                                            GET /wp-content/libraries/gantry/assets/jui/fonts/font-awesome4/fontawesome-webfont.ttf?v=4.2.0 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/wp-content/themes/casino-theme/css/master-3a9d5bbe25fa4ce5b9fec2f02ef5f866.css?ver=1.0.1

search
                                         104.21.86.10
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 08 Nov 2022 02:54:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: max-age=14400, must-revalidate
Link: <http://kozbanov-lawyer.ru/wp-json/>; rel="https://api.w.org/"
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ty558EMMNWYjkaE%2BBkGkDyDOrnxLhcrt3XWJTw9ZHccWyZCLmSJ%2B%2FoQ0MRBsJcHh23tqhTbttFj80uy9oYYx9PM1YxxK8iC03eOXO7UBzVQMUpAXfn5%2FCjnsBfiwNL1L8%2FYJfOQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 766b067bcfa00af6-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (20374), with CRLF, LF line terminators
Size:   6748
Md5:    d6e52fcb5954209638a07d617399515b
Sha1:   b4693b01b2e57f1cf45b017fde74c2c1556b1091
Sha256: bd1224f86bf825298a9081f3a07c47d0a8e33c968ddc2f91cee7b48a44bcc60a
                                        
                                            GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://kozbanov-lawyer.ru
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: application/octet-stream; charset=utf-8
                                        
date: Tue, 08 Nov 2022 02:54:40 GMT
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 466127
expires: Sun, 29 Oct 2023 02:54:40 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FEhw2FYq73ukDDTTtbHkIx7u29JhsZT8QBQkDo5lT0mdwk05Zxw2ZWUl7FL4yMBjM%2BNQv4KbQZxLAc%2BzEH31lp53M3J1vl1gDDPPH%2Bx0BM3FSNTWKMc4bjrxtZntb7eGOAQzim1R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 766b067e4b8bb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size:   77160
Md5:    af7ae505a9eed503f8b8e6982036873e
Sha1:   d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
Sha256: 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8742
Expires: Tue, 08 Nov 2022 05:20:22 GMT
Date: Tue, 08 Nov 2022 02:54:40 GMT
Connection: keep-alive

                                        
                                            GET /widget/proxy.php?csurl=/form/two_page2/0.1/init.js?token=f6b37f6b5b5d0c2d5cfaa21139e80a53 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 08 Nov 2022 02:54:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Proxy-Cache: MISS
Cache-Control: max-age=60
Pragma: public
vary: Accept-Encoding
x-powered-by: PHP/7.4.30
access-control-allow-origin: *
content-encoding: gzip
X-Cache-Status: BYPASS
X-Cache-Skip: 110
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fTwZ6ZJFIsy9anNfLaQXdAz2yoAr3n2H%2BNG%2B9oFtwnjq7zEd0koahtdmPn7MAoPh4FBOnRXInKN4q9VVj%2FMiaa7O3YinC8Ww9su5DpySK6dAXKF8H%2BrU86W0K0hhy75vnpnZjLo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 766b06750d20b511-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  data
Size:   33190
Md5:    93c844b50d1dce15f86d9b39b3b0bf93
Sha1:   b591678d41287bf57b96e9a2cb1a62bbac3b67e0
Sha256: b88d81cae211a13bc338a954b6445831591bb5d37704c35402d49e10d85c067a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8742
Expires: Tue, 08 Nov 2022 05:20:22 GMT
Date: Tue, 08 Nov 2022 02:54:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8742
Expires: Tue, 08 Nov 2022 05:20:22 GMT
Date: Tue, 08 Nov 2022 02:54:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8B849BBE5D73C02BD82C39E5970EF02D46BF36CCFED31B51DB437D85D12C004B"
Last-Modified: Sat, 05 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8742
Expires: Tue, 08 Nov 2022 05:20:22 GMT
Date: Tue, 08 Nov 2022 02:54:40 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8741ea01-6829-4b7c-a14e-c14c2134d6ca.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6566
x-amzn-requestid: d4d93654-95f8-4159-ac6a-2f533e9fe980
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKMHraoAMFwKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-1b13db672438492e1e63e84d;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qcZCx7Ib63Yah4wRRjNBJ0fj2YYrbHUJRe87pj9i5grdNIxV40XvdA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:30 GMT
age: 18850
etag: "9ca921755116b9bc783e340cb523f376942896af"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6566
Md5:    17911ced5822253969e1e3c1743b3ab0
Sha1:   9ca921755116b9bc783e340cb523f376942896af
Sha256: 625e7648f13ce472f4d871ba9eff6d958a8cd0a548cdec183ec3d01cc6ab41a6
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10462
x-amzn-requestid: 6dc7dc5c-88e9-4550-abf0-f16965ab7cd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bF_38GKXoAMFwSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636579cc-28ea4125437c31cc34683fb7;Sampled=0
x-amzn-remapped-date: Fri, 04 Nov 2022 20:45:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Q0yZmbExDP4tH0n1n2qj_NR2Mv_y_dsO0LJ1RKZoS6Me-NLbhpUWqw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 09:11:38 GMT
age: 63782
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10462
Md5:    4e2853cc6ec6223160471401e6871f4b
Sha1:   f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
Sha256: bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5ca2e26-8d97-41c7-ab13-0a83acea6fba.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4266
x-amzn-requestid: 928296aa-883a-45a1-adc1-b4bb1d8041fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKMEnjoAMF0Mw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-4bf2d24e089a9b19178bac8b;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PWoH84JsugJSOe6HbRzZ5h5RUpat59Ky1xlqUjFH5JqQ9Y14G-e-5w==
via: 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:30 GMT
age: 18850
etag: "04ff44aae159949934dab236a859d47605229416"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4266
Md5:    25906fd46cc175d22a26b74f6818276c
Sha1:   04ff44aae159949934dab236a859d47605229416
Sha256: 71c54baaeedf1f95b24b118e0e788b516847712cc81704520cff58b22a8e3b76
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab24cc00-346e-4042-b6ef-9a39845fbcea.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3444
x-amzn-requestid: a4433da7-1f5d-4868-884c-781b97d7bdda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKLHxE3GIAMFw6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63672564-3cc306b55213f93a7aee02f6;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 03:09:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oz_r-Q8aVYq4Doiet8VW9MMEL4rhGR44kfkErSSBsghfukPzKxmK0w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 04:12:55 GMT
age: 81705
etag: "128d8eba8785f2439fc8afef97fe7833370c959d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3444
Md5:    09863849007068c6a030b2d9e3919e8b
Sha1:   128d8eba8785f2439fc8afef97fe7833370c959d
Sha256: d7b66cdf98c9e18e8b0c268511067f78a5e7a3c063e13bf1741c7ecc7726e0ce
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92bcf73f-5c71-47c9-824d-b8fa1f9af018.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10781
x-amzn-requestid: c5063271-8b84-41d7-899c-958c135541c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAwTF2cIAMF0DQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697b34-6b6018d826efae3e3738a7d9;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: tL667rmWZPwJrD76JI5jBbUa3oEwaLZc-A5omJ8WyQMzsxDgIXsQhg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 22:11:08 GMT
etag: "5d51855ed7cc6f8cac53eef1730212eb70b28036"
age: 17012
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10781
Md5:    4ff4c1be0934222258267f7595f2ecde
Sha1:   5d51855ed7cc6f8cac53eef1730212eb70b28036
Sha256: 49ce70117f2b108ebcff7f8e0ac14b2583eaf6b36a10baff097b35b728ba44d9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a2bb539-06cb-47fd-8d3c-7043929bfeaa.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9336
x-amzn-requestid: fb33f029-9d6c-40df-aab2-bdb139d8dedb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bQAKOGdEIAMFujA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63697a41-53c235ce324b4e896b401a40;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 21:36:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wiVqhBy98fSb32WK61Z0nQQH1XMnTnD-XPqmNZkCYqnvMY7dzsSudw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 07 Nov 2022 21:40:30 GMT
age: 18850
etag: "e5e369ed7b77ff7639bffc16da2f2ca6c035421c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9336
Md5:    71473fb15e07b9c973e7368bdd2c2eb7
Sha1:   e5e369ed7b77ff7639bffc16da2f2ca6c035421c
Sha256: a7e72e22f9d0204e2be1f21fe1c66c8469c5b14ef3b4c64f3cf2335ba5365618
                                        
                                            GET /css?family=PT+Sans:regular,italic,700,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 08 Nov 2022 02:54:38 GMT
date: Tue, 08 Nov 2022 02:54:38 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /widget/law/v4/assets.json?nocache=0.4932550716014307 HTTP/1.1 
Host: partnerforce.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://kozbanov-lawyer.ru
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.67.217.192
HTTP/2 200 OK
content-type: application/json
                                        
date: Tue, 08 Nov 2022 02:54:39 GMT
last-modified: Sun, 21 Jun 2020 17:59:40 GMT
etag: W/"5eefa00c-2e3"
x-cache-skip: 100
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9%2B%2F9xH4Z78KfeZXLMgP5Qqx7UYCBW4lPUxcJdlyDstdhAfLUTWL3QdOcpKDHtUoJ9pqHebj6BmA9gkCQ12ZgawBnkdwoZGQpkmxHm8DLJSH96eQv99a7PvPTszvDPf96rTo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 766b0679adfafac4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /widget/proxy.php?csurl=/form/two_page2/0.1/init.js?token=f6b37f6b5b5d0c2d5cfaa21139e80a53 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Proxy-Cache: MISS
Cache-Control: max-age=60
Pragma: public
vary: Accept-Encoding
x-powered-by: PHP/7.4.30
access-control-allow-origin: *
content-encoding: gzip
X-Cache-Status: BYPASS
X-Cache-Skip: 100
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QvRtij2uJSHeebnRJrtokakd8TFpKKY7qE6QmmkuVKnv2lUqgcfflkzpbrdmXDjY6EQ5cpr0qo4sR6kQWgwDeFlGQ9YTOywY29SfU4dyuCxDXcL6ckF43%2BpqWnlThkVHl9ZIbTE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 766b06721db8b521-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
                                        
                                            GET /widget/proxy.php?csurl=/form/two_page2/0.1/init.js?token=e2f74eb89f0f0e540e4ff61fc9419bb5 HTTP/1.1 
Host: kozbanov-lawyer.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://kozbanov-lawyer.ru/est-li-skidki-na-kupejnye-vagony-shkolnikam-uljanovsk-anapa-51992

search
                                         104.21.86.10
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 08 Nov 2022 02:54:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Proxy-Cache: MISS
Cache-Control: max-age=60
Pragma: public
vary: Accept-Encoding
x-powered-by: PHP/7.4.30
access-control-allow-origin: *
content-encoding: gzip
X-Cache-Status: BYPASS
X-Cache-Skip: 100
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kdOR1BVbPJ0npD52PuxDkwVZOcWGWnRjK5ifZjp1tUdzP65w2jwNEYzS1fw0SxF2W9cJVYEZm4Oia3DDlxl9H3U5L0ACwBZ5SBQ6yLUIDwCEzz5Xoc1jcpK1D9Vh1kLZrxXWxY8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 766b06720ef1b50f-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---