Analysis

  • max time kernel
    135s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    14/07/2022, 21:46 UTC

General

  • Target

    achwithrat.exe

  • Size

    1020KB

  • MD5

    e409c85a0d1dcf43d2ed11c436e9aabe

  • SHA1

    a221ecf82df1650b6a34b15cfcf052581d316aa6

  • SHA256

    41417677b9fb6ec8e48a5c633da51083ea8887d34eedc7cd2b8a231e1d70e5d6

  • SHA512

    9ff191e371c097fdc9627ee817c6a774e24b880fc09a4e41faf37cfc4046e9c499cf2f14f9e720f71c288cc70cd3e4664c68c39df6aceeefe57aecd24022e828

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

gay

C2

4.tcp.eu.ngrok.io:10296

Mutex

f61a5d905ecbb8c8be462972af515144

Attributes
  • reg_key

    f61a5d905ecbb8c8be462972af515144

  • splitter

    |'|'|

Signatures

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

  • suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

    suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)

  • suricata: ET MALWARE njrat ver 0.7d Malware CnC Callback (Capture)

    suricata: ET MALWARE njrat ver 0.7d Malware CnC Callback (Capture)

  • Executes dropped EXE 3 IoCs
  • Modifies Windows Firewall 1 TTPs 1 IoCs
  • Drops startup file 2 IoCs
  • Loads dropped DLL 9 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Drops autorun.inf file 1 TTPs 3 IoCs

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Drops file in Program Files directory 35 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Runs regedit.exe 10 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 15 IoCs
  • Suspicious use of FindShellTrayWindow 16 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\achwithrat.exe
    "C:\Users\Admin\AppData\Local\Temp\achwithrat.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious use of WriteProcessMemory
    PID:1964
    • C:\Program Files (x86)\skleika\jopa.exe
      "C:\Program Files (x86)\skleika\jopa.exe"
      2⤵
      • Executes dropped EXE
      • Drops startup file
      • Adds Run key to start application
      • Drops autorun.inf file
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      PID:1260
      • C:\Windows\SysWOW64\netsh.exe
        netsh firewall add allowedprogram "C:\Program Files (x86)\skleika\jopa.exe" "jopa.exe" ENABLE
        3⤵
        • Modifies Windows Firewall
        PID:2220
    • C:\Program Files (x86)\skleika\ach.exe
      "C:\Program Files (x86)\skleika\ach.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Suspicious use of WriteProcessMemory
      PID:2024
      • C:\Windows\SysWOW64\WScript.exe
        "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
        3⤵
          PID:960
        • C:\Program Files (x86)\ach\2.exe
          "C:\Program Files (x86)\ach\2.exe"
          3⤵
          • Executes dropped EXE
          PID:1688
        • C:\Windows\SysWOW64\cmd.exe
          cmd /c ""C:\Program Files (x86)\ach\3.bat" "
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:268
          • C:\Program Files\Internet Explorer\iexplore.exe
            "C:\Program Files\Internet Explorer\iexplore.exe" https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
            4⤵
            • Modifies Internet Explorer settings
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SetWindowsHookEx
            PID:1224
            • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
              "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1224 CREDAT:275457 /prefetch:2
              5⤵
              • Modifies Internet Explorer settings
              • Suspicious use of SetWindowsHookEx
              PID:1936
            • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
              "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1224 CREDAT:340994 /prefetch:2
              5⤵
                PID:5184
          • C:\Windows\SysWOW64\cmd.exe
            cmd /c ""C:\Program Files (x86)\ach\3.bat" "
            3⤵
              PID:1480
              • C:\Program Files\Internet Explorer\iexplore.exe
                "C:\Program Files\Internet Explorer\iexplore.exe" https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                4⤵
                • Modifies Internet Explorer settings
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SetWindowsHookEx
                PID:1472
                • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1472 CREDAT:275457 /prefetch:2
                  5⤵
                  • Modifies Internet Explorer settings
                  PID:2052
            • C:\Windows\SysWOW64\WScript.exe
              "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
              3⤵
                PID:1388
              • C:\Windows\SysWOW64\WScript.exe
                "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                3⤵
                  PID:1844
                • C:\Windows\SysWOW64\WScript.exe
                  "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                  3⤵
                    PID:1340
                  • C:\Windows\SysWOW64\WScript.exe
                    "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                    3⤵
                      PID:1968
                    • C:\Windows\SysWOW64\WScript.exe
                      "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                      3⤵
                        PID:1128
                      • C:\Windows\SysWOW64\WScript.exe
                        "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                        3⤵
                          PID:1556
                        • C:\Windows\SysWOW64\WScript.exe
                          "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                          3⤵
                            PID:1584
                          • C:\Windows\SysWOW64\WScript.exe
                            "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                            3⤵
                              PID:780
                            • C:\Windows\SysWOW64\WScript.exe
                              "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                              3⤵
                                PID:1712
                              • C:\Windows\SysWOW64\cmd.exe
                                cmd /c ""C:\Program Files (x86)\ach\4.bat" "
                                3⤵
                                  PID:1232
                                  • C:\Program Files\Internet Explorer\iexplore.exe
                                    "C:\Program Files\Internet Explorer\iexplore.exe" https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                    4⤵
                                    • Modifies Internet Explorer settings
                                    • Suspicious use of FindShellTrayWindow
                                    • Suspicious use of SetWindowsHookEx
                                    PID:2308
                                    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2308 CREDAT:275457 /prefetch:2
                                      5⤵
                                      • Modifies Internet Explorer settings
                                      PID:3508
                                • C:\Windows\SysWOW64\cmd.exe
                                  cmd /c ""C:\Program Files (x86)\ach\3.bat" "
                                  3⤵
                                    PID:1768
                                    • C:\Program Files\Internet Explorer\iexplore.exe
                                      "C:\Program Files\Internet Explorer\iexplore.exe" https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                      4⤵
                                      • Modifies Internet Explorer settings
                                      • Suspicious use of FindShellTrayWindow
                                      • Suspicious use of SetWindowsHookEx
                                      PID:2768
                                      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2768 CREDAT:275457 /prefetch:2
                                        5⤵
                                        • Modifies Internet Explorer settings
                                        PID:1632
                                  • C:\Windows\SysWOW64\cmd.exe
                                    cmd /c ""C:\Program Files (x86)\ach\4.bat" "
                                    3⤵
                                      PID:1900
                                      • C:\Program Files\Internet Explorer\iexplore.exe
                                        "C:\Program Files\Internet Explorer\iexplore.exe" https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                        4⤵
                                        • Modifies Internet Explorer settings
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of SetWindowsHookEx
                                        PID:2408
                                        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2408 CREDAT:275457 /prefetch:2
                                          5⤵
                                            PID:3636
                                      • C:\Windows\SysWOW64\cmd.exe
                                        cmd /c ""C:\Program Files (x86)\ach\3.bat" "
                                        3⤵
                                          PID:1744
                                          • C:\Program Files\Internet Explorer\iexplore.exe
                                            "C:\Program Files\Internet Explorer\iexplore.exe" https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                            4⤵
                                            • Modifies Internet Explorer settings
                                            • Suspicious use of FindShellTrayWindow
                                            • Suspicious use of SetWindowsHookEx
                                            PID:2468
                                            • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                              "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2468 CREDAT:275457 /prefetch:2
                                              5⤵
                                              • Modifies Internet Explorer settings
                                              PID:3628
                                        • C:\Windows\SysWOW64\cmd.exe
                                          cmd /c ""C:\Program Files (x86)\ach\4.bat" "
                                          3⤵
                                            PID:1196
                                            • C:\Program Files\Internet Explorer\iexplore.exe
                                              "C:\Program Files\Internet Explorer\iexplore.exe" https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                              4⤵
                                              • Modifies Internet Explorer settings
                                              • Suspicious use of FindShellTrayWindow
                                              • Suspicious use of SetWindowsHookEx
                                              PID:2424
                                              • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:2
                                                5⤵
                                                • Modifies Internet Explorer settings
                                                PID:3848
                                          • C:\Windows\SysWOW64\cmd.exe
                                            cmd /c ""C:\Program Files (x86)\ach\3.bat" "
                                            3⤵
                                              PID:900
                                              • C:\Program Files\Internet Explorer\iexplore.exe
                                                "C:\Program Files\Internet Explorer\iexplore.exe" https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                4⤵
                                                • Modifies Internet Explorer settings
                                                • Suspicious use of FindShellTrayWindow
                                                • Suspicious use of SetWindowsHookEx
                                                PID:2496
                                                • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2496 CREDAT:275457 /prefetch:2
                                                  5⤵
                                                  • Modifies Internet Explorer settings
                                                  PID:3744
                                            • C:\Windows\SysWOW64\cmd.exe
                                              cmd /c ""C:\Program Files (x86)\ach\4.bat" "
                                              3⤵
                                              • Suspicious use of WriteProcessMemory
                                              PID:1480
                                              • C:\Program Files\Internet Explorer\iexplore.exe
                                                "C:\Program Files\Internet Explorer\iexplore.exe" https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                4⤵
                                                • Modifies Internet Explorer settings
                                                • Suspicious use of FindShellTrayWindow
                                                • Suspicious use of SetWindowsHookEx
                                                PID:2060
                                                • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2060 CREDAT:275457 /prefetch:2
                                                  5⤵
                                                  • Modifies Internet Explorer settings
                                                  PID:3596
                                            • C:\Windows\SysWOW64\WScript.exe
                                              "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                                              3⤵
                                                PID:2172
                                              • C:\Windows\SysWOW64\cmd.exe
                                                cmd /c ""C:\Program Files (x86)\ach\6.bat" "
                                                3⤵
                                                  PID:2276
                                                  • C:\Program Files\Internet Explorer\iexplore.exe
                                                    "C:\Program Files\Internet Explorer\iexplore.exe" https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg
                                                    4⤵
                                                    • Modifies Internet Explorer settings
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SetWindowsHookEx
                                                    PID:2368
                                                    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
                                                      5⤵
                                                        PID:3800
                                                  • C:\Windows\SysWOW64\cmd.exe
                                                    cmd /c ""C:\Program Files (x86)\ach\6.bat" "
                                                    3⤵
                                                      PID:2312
                                                      • C:\Program Files\Internet Explorer\iexplore.exe
                                                        "C:\Program Files\Internet Explorer\iexplore.exe" https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg
                                                        4⤵
                                                        • Modifies Internet Explorer settings
                                                        • Suspicious use of FindShellTrayWindow
                                                        • Suspicious use of SetWindowsHookEx
                                                        PID:2184
                                                        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
                                                          5⤵
                                                          • Modifies Internet Explorer settings
                                                          PID:3564
                                                    • C:\Windows\SysWOW64\cmd.exe
                                                      cmd /c ""C:\Program Files (x86)\ach\6.bat" "
                                                      3⤵
                                                        PID:2328
                                                        • C:\Program Files\Internet Explorer\iexplore.exe
                                                          "C:\Program Files\Internet Explorer\iexplore.exe" https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg
                                                          4⤵
                                                          • Modifies Internet Explorer settings
                                                          • Suspicious use of FindShellTrayWindow
                                                          • Suspicious use of SetWindowsHookEx
                                                          PID:2444
                                                          • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                            "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2444 CREDAT:275457 /prefetch:2
                                                            5⤵
                                                            • Modifies Internet Explorer settings
                                                            PID:3660
                                                      • C:\Windows\SysWOW64\cmd.exe
                                                        cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                        3⤵
                                                          PID:2364
                                                          • C:\Windows\SysWOW64\regedit.exe
                                                            regedit.exe
                                                            4⤵
                                                            • Runs regedit.exe
                                                            PID:2528
                                                        • C:\Windows\SysWOW64\cmd.exe
                                                          cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                          3⤵
                                                            PID:2400
                                                            • C:\Windows\SysWOW64\regedit.exe
                                                              regedit.exe
                                                              4⤵
                                                              • Runs regedit.exe
                                                              PID:2552
                                                          • C:\Windows\SysWOW64\cmd.exe
                                                            cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                            3⤵
                                                              PID:2440
                                                              • C:\Windows\SysWOW64\regedit.exe
                                                                regedit.exe
                                                                4⤵
                                                                • Runs regedit.exe
                                                                PID:2544
                                                            • C:\Windows\SysWOW64\cmd.exe
                                                              cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                              3⤵
                                                                PID:2476
                                                                • C:\Windows\SysWOW64\regedit.exe
                                                                  regedit.exe
                                                                  4⤵
                                                                  • Runs regedit.exe
                                                                  PID:2536
                                                              • C:\Windows\SysWOW64\cmd.exe
                                                                cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                                3⤵
                                                                  PID:2504
                                                                  • C:\Windows\SysWOW64\regedit.exe
                                                                    regedit.exe
                                                                    4⤵
                                                                    • Runs regedit.exe
                                                                    PID:2724
                                                                • C:\Windows\SysWOW64\cmd.exe
                                                                  cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                                  3⤵
                                                                    PID:2592
                                                                    • C:\Windows\SysWOW64\regedit.exe
                                                                      regedit.exe
                                                                      4⤵
                                                                      • Runs regedit.exe
                                                                      PID:2704
                                                                  • C:\Windows\SysWOW64\cmd.exe
                                                                    cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                                    3⤵
                                                                      PID:2636
                                                                      • C:\Windows\SysWOW64\regedit.exe
                                                                        regedit.exe
                                                                        4⤵
                                                                        • Runs regedit.exe
                                                                        PID:3064
                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                      cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                                      3⤵
                                                                        PID:2656
                                                                        • C:\Windows\SysWOW64\regedit.exe
                                                                          regedit.exe
                                                                          4⤵
                                                                          • Runs regedit.exe
                                                                          PID:4084
                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                        cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                                        3⤵
                                                                          PID:2736
                                                                          • C:\Windows\SysWOW64\regedit.exe
                                                                            regedit.exe
                                                                            4⤵
                                                                            • Runs regedit.exe
                                                                            PID:1420
                                                                        • C:\Windows\SysWOW64\cmd.exe
                                                                          cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                          3⤵
                                                                            PID:2756
                                                                            • C:\Windows\SysWOW64\write.exe
                                                                              write.exe
                                                                              4⤵
                                                                                PID:3344
                                                                                • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                  "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                  5⤵
                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                  PID:3704
                                                                              • C:\Windows\SysWOW64\write.exe
                                                                                write.exe
                                                                                4⤵
                                                                                  PID:3376
                                                                                  • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                    "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                    5⤵
                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                    PID:3752
                                                                                • C:\Windows\SysWOW64\write.exe
                                                                                  write.exe
                                                                                  4⤵
                                                                                    PID:3404
                                                                                    • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                      "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                      5⤵
                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                      PID:3696
                                                                                • C:\Windows\SysWOW64\cmd.exe
                                                                                  cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                  3⤵
                                                                                    PID:2812
                                                                                    • C:\Windows\SysWOW64\write.exe
                                                                                      write.exe
                                                                                      4⤵
                                                                                        PID:3004
                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                          5⤵
                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                          PID:2744
                                                                                      • C:\Windows\SysWOW64\write.exe
                                                                                        write.exe
                                                                                        4⤵
                                                                                          PID:3016
                                                                                          • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                            "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                            5⤵
                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                            PID:2592
                                                                                        • C:\Windows\SysWOW64\write.exe
                                                                                          write.exe
                                                                                          4⤵
                                                                                            PID:3044
                                                                                            • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                              "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                              5⤵
                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                              PID:2632
                                                                                              • C:\Windows\splwow64.exe
                                                                                                C:\Windows\splwow64.exe 12288
                                                                                                6⤵
                                                                                                  PID:764
                                                                                          • C:\Windows\SysWOW64\cmd.exe
                                                                                            cmd /c ""C:\Program Files (x86)\ach\7.bat" "
                                                                                            3⤵
                                                                                              PID:2832
                                                                                              • C:\Windows\SysWOW64\regedit.exe
                                                                                                regedit.exe
                                                                                                4⤵
                                                                                                • Runs regedit.exe
                                                                                                PID:3008
                                                                                            • C:\Windows\SysWOW64\cmd.exe
                                                                                              cmd /c ""C:\Program Files (x86)\ach\9.bat" "
                                                                                              3⤵
                                                                                                PID:2852
                                                                                              • C:\Windows\SysWOW64\cmd.exe
                                                                                                cmd /c ""C:\Program Files (x86)\ach\12.bat" "
                                                                                                3⤵
                                                                                                  PID:2864
                                                                                                • C:\Windows\SysWOW64\WScript.exe
                                                                                                  "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                  3⤵
                                                                                                    PID:2904
                                                                                                  • C:\Windows\SysWOW64\WScript.exe
                                                                                                    "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                                                                                                    3⤵
                                                                                                      PID:2932
                                                                                                    • C:\Windows\SysWOW64\WScript.exe
                                                                                                      "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                      3⤵
                                                                                                        PID:2956
                                                                                                      • C:\Windows\SysWOW64\WScript.exe
                                                                                                        "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                                                                                                        3⤵
                                                                                                          PID:3028
                                                                                                        • C:\Windows\SysWOW64\WScript.exe
                                                                                                          "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                          3⤵
                                                                                                            PID:2340
                                                                                                          • C:\Windows\SysWOW64\WScript.exe
                                                                                                            "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                                                                                                            3⤵
                                                                                                              PID:2604
                                                                                                            • C:\Windows\SysWOW64\WScript.exe
                                                                                                              "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                              3⤵
                                                                                                                PID:2492
                                                                                                              • C:\Windows\SysWOW64\WScript.exe
                                                                                                                "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                                                                                                                3⤵
                                                                                                                  PID:2476
                                                                                                                • C:\Windows\SysWOW64\WScript.exe
                                                                                                                  "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                  3⤵
                                                                                                                    PID:1856
                                                                                                                  • C:\Windows\SysWOW64\WScript.exe
                                                                                                                    "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                                                                                                                    3⤵
                                                                                                                      PID:2880
                                                                                                                    • C:\Windows\SysWOW64\WScript.exe
                                                                                                                      "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                      3⤵
                                                                                                                        PID:3036
                                                                                                                      • C:\Windows\SysWOW64\WScript.exe
                                                                                                                        "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\1.vbs"
                                                                                                                        3⤵
                                                                                                                          PID:3000
                                                                                                                        • C:\Windows\SysWOW64\cmd.exe
                                                                                                                          cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                          3⤵
                                                                                                                            PID:2944
                                                                                                                            • C:\Windows\SysWOW64\write.exe
                                                                                                                              write.exe
                                                                                                                              4⤵
                                                                                                                                PID:3588
                                                                                                                                • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                  "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                  5⤵
                                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                                  PID:2944
                                                                                                                              • C:\Windows\SysWOW64\write.exe
                                                                                                                                write.exe
                                                                                                                                4⤵
                                                                                                                                  PID:3712
                                                                                                                                  • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                    "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                    5⤵
                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                    PID:4108
                                                                                                                                • C:\Windows\SysWOW64\write.exe
                                                                                                                                  write.exe
                                                                                                                                  4⤵
                                                                                                                                    PID:3688
                                                                                                                                    • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                      "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                      5⤵
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:2952
                                                                                                                                • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                  cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                  3⤵
                                                                                                                                    PID:2260
                                                                                                                                    • C:\Windows\SysWOW64\write.exe
                                                                                                                                      write.exe
                                                                                                                                      4⤵
                                                                                                                                        PID:2864
                                                                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                          5⤵
                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                          PID:4164
                                                                                                                                      • C:\Windows\SysWOW64\write.exe
                                                                                                                                        write.exe
                                                                                                                                        4⤵
                                                                                                                                          PID:3732
                                                                                                                                          • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                            "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                            5⤵
                                                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                                                            PID:4208
                                                                                                                                        • C:\Windows\SysWOW64\write.exe
                                                                                                                                          write.exe
                                                                                                                                          4⤵
                                                                                                                                            PID:3684
                                                                                                                                            • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                              "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                              5⤵
                                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                                              PID:4236
                                                                                                                                        • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                          cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                          3⤵
                                                                                                                                            PID:3180
                                                                                                                                            • C:\Windows\SysWOW64\write.exe
                                                                                                                                              write.exe
                                                                                                                                              4⤵
                                                                                                                                                PID:4356
                                                                                                                                                • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                  "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                  5⤵
                                                                                                                                                    PID:5000
                                                                                                                                                • C:\Windows\SysWOW64\write.exe
                                                                                                                                                  write.exe
                                                                                                                                                  4⤵
                                                                                                                                                    PID:4588
                                                                                                                                                    • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                      "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                      5⤵
                                                                                                                                                        PID:4720
                                                                                                                                                    • C:\Windows\SysWOW64\write.exe
                                                                                                                                                      write.exe
                                                                                                                                                      4⤵
                                                                                                                                                        PID:4684
                                                                                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                          5⤵
                                                                                                                                                            PID:3688
                                                                                                                                                      • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                        cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                        3⤵
                                                                                                                                                          PID:3200
                                                                                                                                                          • C:\Windows\SysWOW64\write.exe
                                                                                                                                                            write.exe
                                                                                                                                                            4⤵
                                                                                                                                                              PID:4324
                                                                                                                                                              • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                5⤵
                                                                                                                                                                  PID:5068
                                                                                                                                                              • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                write.exe
                                                                                                                                                                4⤵
                                                                                                                                                                  PID:4452
                                                                                                                                                                  • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                    "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                    5⤵
                                                                                                                                                                      PID:3572
                                                                                                                                                                  • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                    write.exe
                                                                                                                                                                    4⤵
                                                                                                                                                                      PID:4692
                                                                                                                                                                      • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                        "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                        5⤵
                                                                                                                                                                          PID:4780
                                                                                                                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                      cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:3220
                                                                                                                                                                        • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                          write.exe
                                                                                                                                                                          4⤵
                                                                                                                                                                            PID:4332
                                                                                                                                                                            • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                              "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                              5⤵
                                                                                                                                                                                PID:4848
                                                                                                                                                                            • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                              write.exe
                                                                                                                                                                              4⤵
                                                                                                                                                                                PID:4460
                                                                                                                                                                                • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                  "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                  5⤵
                                                                                                                                                                                    PID:4896
                                                                                                                                                                                • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                  write.exe
                                                                                                                                                                                  4⤵
                                                                                                                                                                                    PID:4564
                                                                                                                                                                                    • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                      "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                      5⤵
                                                                                                                                                                                        PID:3204
                                                                                                                                                                                  • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                    cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                    3⤵
                                                                                                                                                                                      PID:3236
                                                                                                                                                                                      • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                        write.exe
                                                                                                                                                                                        4⤵
                                                                                                                                                                                          PID:4344
                                                                                                                                                                                          • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                            "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                            5⤵
                                                                                                                                                                                              PID:5108
                                                                                                                                                                                          • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                            write.exe
                                                                                                                                                                                            4⤵
                                                                                                                                                                                              PID:4468
                                                                                                                                                                                              • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                5⤵
                                                                                                                                                                                                  PID:5060
                                                                                                                                                                                              • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                write.exe
                                                                                                                                                                                                4⤵
                                                                                                                                                                                                  PID:4548
                                                                                                                                                                                                  • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                    "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                      PID:4976
                                                                                                                                                                                                • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                  cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                    PID:3260
                                                                                                                                                                                                    • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                      write.exe
                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                        PID:4368
                                                                                                                                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                            PID:5096
                                                                                                                                                                                                        • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                          write.exe
                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                            PID:4604
                                                                                                                                                                                                            • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                              "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                PID:4804
                                                                                                                                                                                                            • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                              write.exe
                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                PID:4736
                                                                                                                                                                                                                • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                  "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                    PID:3300
                                                                                                                                                                                                              • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                  PID:3268
                                                                                                                                                                                                                  • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                    write.exe
                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                      PID:4404
                                                                                                                                                                                                                      • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                        "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                          PID:4992
                                                                                                                                                                                                                      • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                        write.exe
                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                          PID:4640
                                                                                                                                                                                                                          • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                            "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                              PID:3352
                                                                                                                                                                                                                          • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                            write.exe
                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                              PID:4700
                                                                                                                                                                                                                              • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                  PID:4772
                                                                                                                                                                                                                            • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                              cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                PID:3300
                                                                                                                                                                                                                                • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                  write.exe
                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                    PID:4316
                                                                                                                                                                                                                                    • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                      "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                      PID:4820
                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                    write.exe
                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                      PID:4436
                                                                                                                                                                                                                                      • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                        "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                        PID:4960
                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                      write.exe
                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                        PID:4540
                                                                                                                                                                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                          PID:5076
                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                                      cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                                                      3⤵
                                                                                                                                                                                                                                        PID:3328
                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                          write.exe
                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                            PID:4380
                                                                                                                                                                                                                                            • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                              "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                PID:5020
                                                                                                                                                                                                                                            • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                              write.exe
                                                                                                                                                                                                                                              4⤵
                                                                                                                                                                                                                                                PID:4616
                                                                                                                                                                                                                                                • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                  "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                  5⤵
                                                                                                                                                                                                                                                    PID:4792
                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                  write.exe
                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                    PID:4744
                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                        PID:4676
                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                                                    cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                                                                    3⤵
                                                                                                                                                                                                                                                      PID:3364
                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                        write.exe
                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                          PID:4300
                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                              PID:4904
                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                            write.exe
                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                              PID:4444
                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                  PID:4856
                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                write.exe
                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                  PID:4532
                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                    PID:2140
                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                                                                cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                  PID:3388
                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                    write.exe
                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                      PID:4412
                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                          PID:3492
                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                        write.exe
                                                                                                                                                                                                                                                                        4⤵
                                                                                                                                                                                                                                                                          PID:4632
                                                                                                                                                                                                                                                                          • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                            "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                            5⤵
                                                                                                                                                                                                                                                                              PID:3788
                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                            write.exe
                                                                                                                                                                                                                                                                            4⤵
                                                                                                                                                                                                                                                                              PID:4708
                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                5⤵
                                                                                                                                                                                                                                                                                  PID:3528
                                                                                                                                                                                                                                                                            • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                                                                              cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                PID:3428
                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                                  write.exe
                                                                                                                                                                                                                                                                                  4⤵
                                                                                                                                                                                                                                                                                    PID:4388
                                                                                                                                                                                                                                                                                    • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                      "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                      5⤵
                                                                                                                                                                                                                                                                                        PID:3264
                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                                      write.exe
                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                        PID:4624
                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                            PID:3332
                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                                          write.exe
                                                                                                                                                                                                                                                                                          4⤵
                                                                                                                                                                                                                                                                                            PID:4752
                                                                                                                                                                                                                                                                                            • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                              "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                              5⤵
                                                                                                                                                                                                                                                                                                PID:3516
                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\cmd.exe
                                                                                                                                                                                                                                                                                            cmd /c ""C:\Program Files (x86)\ach\8.bat" "
                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                              PID:3464
                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                                                write.exe
                                                                                                                                                                                                                                                                                                4⤵
                                                                                                                                                                                                                                                                                                  PID:4308
                                                                                                                                                                                                                                                                                                  • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                                    "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                                    5⤵
                                                                                                                                                                                                                                                                                                      PID:4864
                                                                                                                                                                                                                                                                                                  • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                                                    write.exe
                                                                                                                                                                                                                                                                                                    4⤵
                                                                                                                                                                                                                                                                                                      PID:4428
                                                                                                                                                                                                                                                                                                      • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                                        "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                                        5⤵
                                                                                                                                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                                                                                                                                        PID:4764
                                                                                                                                                                                                                                                                                                    • C:\Windows\SysWOW64\write.exe
                                                                                                                                                                                                                                                                                                      write.exe
                                                                                                                                                                                                                                                                                                      4⤵
                                                                                                                                                                                                                                                                                                        PID:4728
                                                                                                                                                                                                                                                                                                        • C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe
                                                                                                                                                                                                                                                                                                          "C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe"
                                                                                                                                                                                                                                                                                                          5⤵
                                                                                                                                                                                                                                                                                                            PID:4724
                                                                                                                                                                                                                                                                                                      • C:\Windows\SysWOW64\WScript.exe
                                                                                                                                                                                                                                                                                                        "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                                                                                                                                                                                                        3⤵
                                                                                                                                                                                                                                                                                                          PID:3536
                                                                                                                                                                                                                                                                                                        • C:\Windows\SysWOW64\WScript.exe
                                                                                                                                                                                                                                                                                                          "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                                                                                                                                                                                                          3⤵
                                                                                                                                                                                                                                                                                                            PID:3576
                                                                                                                                                                                                                                                                                                          • C:\Windows\SysWOW64\WScript.exe
                                                                                                                                                                                                                                                                                                            "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                                                                                                                                                                                                            3⤵
                                                                                                                                                                                                                                                                                                              PID:3608
                                                                                                                                                                                                                                                                                                            • C:\Windows\SysWOW64\WScript.exe
                                                                                                                                                                                                                                                                                                              "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                                                                                                                                                                                                              3⤵
                                                                                                                                                                                                                                                                                                                PID:3644
                                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\WScript.exe
                                                                                                                                                                                                                                                                                                                "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                                                                                                                                                                                                                3⤵
                                                                                                                                                                                                                                                                                                                  PID:3768
                                                                                                                                                                                                                                                                                                                • C:\Windows\SysWOW64\WScript.exe
                                                                                                                                                                                                                                                                                                                  "C:\Windows\System32\WScript.exe" "C:\Program Files (x86)\ach\11.vbs"
                                                                                                                                                                                                                                                                                                                  3⤵
                                                                                                                                                                                                                                                                                                                    PID:3844
                                                                                                                                                                                                                                                                                                              • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                                                                                                                                                                                C:\Windows\SysWOW64\DllHost.exe /Processid:{76D0CB12-7604-4048-B83C-1005C7DDC503}
                                                                                                                                                                                                                                                                                                                1⤵
                                                                                                                                                                                                                                                                                                                • Drops file in Program Files directory
                                                                                                                                                                                                                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                                                                                                                                                PID:1652

                                                                                                                                                                                                                                                                                                              Network

                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                iexplore.exe
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                77.88.55.70
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                5.255.255.55
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                5.255.255.50
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                77.88.55.66
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                188.114.96.0
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                188.114.97.0
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                4.tcp.eu.ngrok.io
                                                                                                                                                                                                                                                                                                                jopa.exe
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                4.tcp.eu.ngrok.io
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                4.tcp.eu.ngrok.io
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                18.198.77.177
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /search/?text=you+are+hacked+by+ach+vzlom HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Accept-CH: Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
                                                                                                                                                                                                                                                                                                                Accept-CH-Lifetime: 31536000
                                                                                                                                                                                                                                                                                                                Cache-Control: private
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=300
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=300, no-transform
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:51:57 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:51:57 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: yandexuid=6344381031657835217; Path=/; Domain=.yandex.ru; Expires=Sat, 13 Jul 2024 21:46:57 GMT; Secure
                                                                                                                                                                                                                                                                                                                Set-Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; path=/; domain=.yandex.ru
                                                                                                                                                                                                                                                                                                                Set-Cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Sat, 13 Jul 2024 21:46:57 GMT
                                                                                                                                                                                                                                                                                                                Set-Cookie: is_gdpr_b=CNiMXhCwfhgB; Path=/; Domain=.yandex.ru; Expires=Sat, 13 Jul 2024 21:46:57 GMT
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:46:57 GMT; secure
                                                                                                                                                                                                                                                                                                                Set-Cookie: i=yi4u5e73/fokhAlfIiBorRV5Q5hf7KvaTXXvuIFLu8ZpeHjRLGxCau2k21STTazbomPBLTrjMMUAi2nLA+YrnhL6HBQ=; Expires=Sat, 13-Jul-2024 21:46:57 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                X-Yandex-Items-Count: 15
                                                                                                                                                                                                                                                                                                                X-Yandex-Req-Id: 1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739
                                                                                                                                                                                                                                                                                                                X-Yandex-STS: 1
                                                                                                                                                                                                                                                                                                                content-type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=471.143.1007/vars=-js-ready=0,-baobab-event-json=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%229api%22%2C%22cts%22%3A1657842437903%2C%22event-id%22%3A%22l5lokzynju%22%2C%22mc%22%3A0%2C%22type%22%3A%22serp-page-loaded%22%2C%22data%22%3A%7B%22vis%22%3A%22visible%22%2C%22visible%22%3A%7B%22webCount%22%3A4%2C%22directCount%22%3A0%2C%22banner%22%3Afalse%7D%2C%22viewportSize%22%3A%7B%22width%22%3A1280%2C%22height%22%3A626%7D%7D%2C%22hdtime%22%3A15974.92%7D%5D/cts=1657842437903/*http://yandex.ru/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=471.143.1007/vars=-js-ready=0,-baobab-event-json=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%229api%22%2C%22cts%22%3A1657842437903%2C%22event-id%22%3A%22l5lokzynju%22%2C%22mc%22%3A0%2C%22type%22%3A%22serp-page-loaded%22%2C%22data%22%3A%7B%22vis%22%3A%22visible%22%2C%22visible%22%3A%7B%22webCount%22%3A4%2C%22directCount%22%3A0%2C%22banner%22%3Afalse%7D%2C%22viewportSize%22%3A%7B%22width%22%3A1280%2C%22height%22%3A626%7D%7D%2C%22hdtime%22%3A15974.92%7D%5D/cts=1657842437903/*http://yandex.ru/ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=mESyAiMKS9aclnpsfWqeXUKh8f/+mK+CGfpoWXKeauU4pmMk//M=; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:19 GMT; secure
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.1033/vars=143=28.2543.153,287=10426,1484=1,2437=2771,2129=1657842421936,1036=0,1037=0,1038=0,1039=0,1040=132,1040.906=132,1310.2084=0,1310.2085=6112,1310.1309=201,1310.1007=6112,2111=0,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=132,2123=6112,2131=6313,2769=0,2770=6112/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.1033/vars=143=28.2543.153,287=10426,1484=1,2437=2771,2129=1657842421936,1036=0,1037=0,1038=0,1039=0,1040=132,1040.906=132,1310.2084=0,1310.2085=6112,1310.1309=201,1310.1007=6112,2111=0,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=132,2123=6112,2131=6313,2769=0,2770=6112/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=srkti9YL0vYR5lKeUOo1bal3aF2NqhTq1McqyCww9kJm94n+ywo=; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:20 GMT; secure
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/events=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%229api%22%2C%22cts%22%3A1657842437913%2C%22event-id%22%3A%22l5lokzyxb2%22%2C%22mc%22%3A0%2C%22type%22%3A%22coords%22%2C%22data%22%3A%7B%22nodes%22%3A%7B%229asb%22%3A%5B100%2C109%2C566%2C135%2C145%5D%2C%229asi%22%3A%5B100%2C254%2C566%2C101%2C111%5D%2C%229asp%22%3A%5B100%2C365%2C566%2C142%2C152%5D%2C%229asx%22%3A%5B100%2C517%2C566%2C118%2C128%5D%2C%229at4%22%3A%5B100%2C645%2C566%2C135%2C145%5D%2C%229atb%22%3A%5B100%2C790%2C566%2C118%2C128%5D%2C%229ati%22%3A%5B100%2C918%2C566%2C84%2C94%5D%2C%229atp%22%3A%5B100%2C1012%2C566%2C135%2C145%5D%2C%229atv%22%3A%5B100%2C1157%2C566%2C118%2C128%5D%2C%229au1%22%3A%5B100%2C1285%2C566%2C135%2C145%5D%2C%229au8%22%3A%5B100%2C1430%2C566%2C101%2C111%5D%2C%229aue%22%3A%5B100%2C1541%2C566%2C118%2C128%5D%2C%229aul%22%3A%5B100%2C1669%2C566%2C101%2C111%5D%2C%229aus%22%3A%5B100%2C1780%2C566%2C101%2C111%5D%2C%229auz%22%3A%5B100%2C1891%2C566%2C118%2C128%5D%7D%2C%22pageNodes%22%3A%7B%229aps%22%3A%5B116%2C56%2C1147%2C36%2C36%5D%2C%229av6%22%3A%5B100%2C2022%2C566%2C53%2C89%5D%2C%229av9%22%3A%5B100%2C2098%2C566%2C38%2C64%5D%2C%229avf%22%3A%5B100%2C2162%2C566%2C30%2C30%5D%7D%7D%2C%22hdtime%22%3A15984.854%7D%5D/cts=1657842437913/*http://yandex.ru/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/events=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%229api%22%2C%22cts%22%3A1657842437913%2C%22event-id%22%3A%22l5lokzyxb2%22%2C%22mc%22%3A0%2C%22type%22%3A%22coords%22%2C%22data%22%3A%7B%22nodes%22%3A%7B%229asb%22%3A%5B100%2C109%2C566%2C135%2C145%5D%2C%229asi%22%3A%5B100%2C254%2C566%2C101%2C111%5D%2C%229asp%22%3A%5B100%2C365%2C566%2C142%2C152%5D%2C%229asx%22%3A%5B100%2C517%2C566%2C118%2C128%5D%2C%229at4%22%3A%5B100%2C645%2C566%2C135%2C145%5D%2C%229atb%22%3A%5B100%2C790%2C566%2C118%2C128%5D%2C%229ati%22%3A%5B100%2C918%2C566%2C84%2C94%5D%2C%229atp%22%3A%5B100%2C1012%2C566%2C135%2C145%5D%2C%229atv%22%3A%5B100%2C1157%2C566%2C118%2C128%5D%2C%229au1%22%3A%5B100%2C1285%2C566%2C135%2C145%5D%2C%229au8%22%3A%5B100%2C1430%2C566%2C101%2C111%5D%2C%229aue%22%3A%5B100%2C1541%2C566%2C118%2C128%5D%2C%229aul%22%3A%5B100%2C1669%2C566%2C101%2C111%5D%2C%229aus%22%3A%5B100%2C1780%2C566%2C101%2C111%5D%2C%229auz%22%3A%5B100%2C1891%2C566%2C118%2C128%5D%7D%2C%22pageNodes%22%3A%7B%229aps%22%3A%5B116%2C56%2C1147%2C36%2C36%5D%2C%229av6%22%3A%5B100%2C2022%2C566%2C53%2C89%5D%2C%229av9%22%3A%5B100%2C2098%2C566%2C38%2C64%5D%2C%229avf%22%3A%5B100%2C2162%2C566%2C30%2C30%5D%7D%7D%2C%22hdtime%22%3A15984.854%7D%5D/cts=1657842437913/*http://yandex.ru/ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=L+GEdY3mXaluOUudqvIAcnoGvI3lTOqLI9K0YftQ1cVQDlBhQVM=; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:19 GMT; secure
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=1724,143.2129=1657842421936,207=15925.484/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=1724,143.2129=1657842421936,207=15925.484/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=ZdL1za1HL1u1OlN4PCuxo1uhbzTkAVJNUtus8jBkP/fwu88eANI=; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:20 GMT; secure
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=6112.479,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=6831.498,2136=721.973,2322=6109.525,2428=0,143.2129=1657842421936,143.2112=0,143.2119=0/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=6112.479,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=6831.498,2136=721.973,2322=6109.525,2428=0,143.2129=1657842421936,143.2112=0,143.2119=0/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=ZdL1za1HL1u1OlN4PCuxo1uhbzTkAVJNUtus8jBkP/fwu88eANI=; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/captcha_smart_error.min.js?k=1632998364813
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /captcha_smart_error.min.js?k=1632998364813 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=86400
                                                                                                                                                                                                                                                                                                                Content-Length: 9104
                                                                                                                                                                                                                                                                                                                Content-Type: application/x-javascript
                                                                                                                                                                                                                                                                                                                Last-Modified: Wed, 13 Jul 2022 13:53:43 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Yandex-EU-Request: 1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/captcha_smart.min.js?k=1632998364813
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /captcha_smart.min.js?k=1632998364813 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=86400
                                                                                                                                                                                                                                                                                                                Content-Length: 245547
                                                                                                                                                                                                                                                                                                                Content-Type: application/x-javascript
                                                                                                                                                                                                                                                                                                                Last-Modified: Wed, 13 Jul 2022 13:53:43 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Yandex-EU-Request: 1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                POST
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/click
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                POST /clck/click HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Content-Type: text/plain;charset=UTF-8
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Content-Length: 939
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 400 Bad request
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=OMeJOPTTQgG+9qe5qeujZcD3xmO+u6wrB+4VudjwDuZEH0CAYG4=; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:13 GMT; secure
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /search/?text=you+are+hacked+by+ach+vzlom HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Moved temporarily
                                                                                                                                                                                                                                                                                                                Location: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:46:58 GMT
                                                                                                                                                                                                                                                                                                                Set-Cookie: i=/xw41ho0vFpeIEqCaIHRnhl+KMbvtE9Mv3wiALVRuCZsCpjVg1QWhpEPFJJh9A61Zh0BSilHcMqj29p23ujXjjwPUJQ=; Expires=Sat, 13-Jul-2024 21:46:58 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Yandex-EU-Request: 1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=/xw41ho0vFpeIEqCaIHRnhl+KMbvtE9Mv3wiALVRuCZsCpjVg1QWhpEPFJJh9A61Zh0BSilHcMqj29p23ujXjjwPUJQ=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Content-Length: 6790
                                                                                                                                                                                                                                                                                                                Content-Type: text/html
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; Expires=Sat, 13-Jul-2024 21:46:58 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Yandex-EU-Request: 1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/captcha_smart.min.css?k=1632998364813
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /captcha_smart.min.css?k=1632998364813 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/css, */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=86400
                                                                                                                                                                                                                                                                                                                Content-Length: 24785
                                                                                                                                                                                                                                                                                                                Content-Type: text/css
                                                                                                                                                                                                                                                                                                                Last-Modified: Wed, 13 Jul 2022 13:53:43 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Yandex-EU-Request: 1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/favicon.ico
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /favicon.ico HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=LfwHUYmitYj/2V7nFejIA0G6yjtjkJNQIrHKuCafTSPHe51r65I=; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 301 Moved permanently
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=JiYxFk8xNA7fBkeCZb2QEjbDxxHjJbmXFXLTYuerYjtHWsN9UBAeuA==; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:20 GMT; secure
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:20 GMT; secure
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                location: https://yastatic.net/lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                188.114.96.0:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /memes/da2f1ad351b86210222d977d86acd913.jpg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:01 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Content-Length: 29520
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                last-modified: Fri, 03 Jan 2020 14:05:00 GMT
                                                                                                                                                                                                                                                                                                                etag: "3a694ebaec3cfb8aab32c7bcb1cdd370"
                                                                                                                                                                                                                                                                                                                expires: Fri, 14 Jul 2023 17:03:43 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=31536000
                                                                                                                                                                                                                                                                                                                access-control-allow-origin: *
                                                                                                                                                                                                                                                                                                                CF-Cache-Status: HIT
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
                                                                                                                                                                                                                                                                                                                Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ulZj3EOkCRucvbdNBF1cvURX6V7vHfdjNz3A27hVZ8sHlFD17PbJmZM0vKJ7Nwp35kA99prQ2zSf9Wkk57ijlnuJsrIdLcniZXRyU5ItVjEt5m1KIQOFwy3jh%2BSdvcF3FYyXJF1ElQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                Server: cloudflare
                                                                                                                                                                                                                                                                                                                CF-RAY: 72ad74542afdb960-AMS
                                                                                                                                                                                                                                                                                                                alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/favicon.ico
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                188.114.96.0:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /favicon.ico HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 404 Not Found
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:20 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                x-powered-by: Express
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=14400
                                                                                                                                                                                                                                                                                                                CF-Cache-Status: HIT
                                                                                                                                                                                                                                                                                                                Age: 10
                                                                                                                                                                                                                                                                                                                Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
                                                                                                                                                                                                                                                                                                                Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dBq5o03Vexzl%2B84BMknC5F2oQwNttLjnOPoNfxSJ%2BOM1oGCs3eo6UlTlmOF34uKMv1DfMEW87bg9HedWQMjmmEDLvkFCZdsq5mGHRZLmojqAWXj4lDHT6DcjJV2F8UIbMLuWpOCHPw%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                Server: cloudflare
                                                                                                                                                                                                                                                                                                                CF-RAY: 72ad74cc48d2b960-AMS
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                identrust.edgesuite.net
                                                                                                                                                                                                                                                                                                                identrust.edgesuite.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                a1952.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                a1952.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.201
                                                                                                                                                                                                                                                                                                                a1952.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.182
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                identrust.edgesuite.net
                                                                                                                                                                                                                                                                                                                identrust.edgesuite.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                a1952.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                a1952.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.182
                                                                                                                                                                                                                                                                                                                a1952.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.201
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://apps.identrust.com/roots/dstrootcax3.p7c
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                104.110.191.201:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /roots/dstrootcax3.p7c HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: apps.identrust.com
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=15768000
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: default-src 'self' *.identrust.com
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 18 Mar 2022 22:02:00 GMT
                                                                                                                                                                                                                                                                                                                ETag: "37d-5da854bc10600"
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Length: 893
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Frame-Options: sameorigin
                                                                                                                                                                                                                                                                                                                Content-Type: application/pkcs7-mime
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:46:56 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:46:56 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://apps.identrust.com/roots/dstrootcax3.p7c
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                104.110.191.182:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /roots/dstrootcax3.p7c HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: apps.identrust.com
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=15768000
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: default-src 'self' *.identrust.com
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 18 Mar 2022 22:02:00 GMT
                                                                                                                                                                                                                                                                                                                ETag: "37d-5da854bc10600"
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Length: 893
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Frame-Options: sameorigin
                                                                                                                                                                                                                                                                                                                Content-Type: application/pkcs7-mime
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:46:56 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:46:56 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/events=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%22bblx%22%2C%22cts%22%3A1657842443356%2C%22event-id%22%3A%22l5lol4641o%22%2C%22mc%22%3A0%2C%22type%22%3A%22coords%22%2C%22data%22%3A%7B%22nodes%22%3A%7B%22bboq%22%3A%5B100%2C109%2C566%2C135%2C145%5D%2C%22bbox%22%3A%5B100%2C254%2C566%2C101%2C111%5D%2C%22bbp4%22%3A%5B100%2C365%2C566%2C118%2C128%5D%2C%22bbpb%22%3A%5B100%2C493%2C566%2C118%2C128%5D%2C%22bbpi%22%3A%5B100%2C621%2C566%2C135%2C145%5D%2C%22bbpp%22%3A%5B100%2C766%2C566%2C118%2C128%5D%2C%22bbpy%22%3A%5B100%2C894%2C566%2C125%2C135%5D%2C%22bbq5%22%3A%5B100%2C1029%2C566%2C118%2C128%5D%2C%22bbqb%22%3A%5B100%2C1157%2C566%2C135%2C145%5D%2C%22bbqi%22%3A%5B100%2C1302%2C566%2C101%2C111%5D%2C%22bbqp%22%3A%5B100%2C1413%2C566%2C84%2C94%5D%2C%22bbqw%22%3A%5B100%2C1507%2C566%2C135%2C145%5D%2C%22bbr3%22%3A%5B100%2C1652%2C566%2C118%2C128%5D%2C%22bbra%22%3A%5B100%2C1780%2C566%2C135%2C145%5D%2C%22bbrg%22%3A%5B100%2C1925%2C566%2C101%2C111%5D%7D%2C%22pageNodes%22%3A%7B%22bbm7%22%3A%5B116%2C56%2C1147%2C36%2C36%5D%2C%22bbrm%22%3A%5B100%2C2039%2C566%2C53%2C89%5D%2C%22bbrp%22%3A%5B100%2C2115%2C566%2C38%2C64%5D%2C%22bbrv%22%3A%5B100%2C2179%2C566%2C30%2C30%5D%7D%7D%2C%22hdtime%22%3A20918.721%7D%5D/cts=1657842443356/*http://yandex.ru/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/events=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%22bblx%22%2C%22cts%22%3A1657842443356%2C%22event-id%22%3A%22l5lol4641o%22%2C%22mc%22%3A0%2C%22type%22%3A%22coords%22%2C%22data%22%3A%7B%22nodes%22%3A%7B%22bboq%22%3A%5B100%2C109%2C566%2C135%2C145%5D%2C%22bbox%22%3A%5B100%2C254%2C566%2C101%2C111%5D%2C%22bbp4%22%3A%5B100%2C365%2C566%2C118%2C128%5D%2C%22bbpb%22%3A%5B100%2C493%2C566%2C118%2C128%5D%2C%22bbpi%22%3A%5B100%2C621%2C566%2C135%2C145%5D%2C%22bbpp%22%3A%5B100%2C766%2C566%2C118%2C128%5D%2C%22bbpy%22%3A%5B100%2C894%2C566%2C125%2C135%5D%2C%22bbq5%22%3A%5B100%2C1029%2C566%2C118%2C128%5D%2C%22bbqb%22%3A%5B100%2C1157%2C566%2C135%2C145%5D%2C%22bbqi%22%3A%5B100%2C1302%2C566%2C101%2C111%5D%2C%22bbqp%22%3A%5B100%2C1413%2C566%2C84%2C94%5D%2C%22bbqw%22%3A%5B100%2C1507%2C566%2C135%2C145%5D%2C%22bbr3%22%3A%5B100%2C1652%2C566%2C118%2C128%5D%2C%22bbra%22%3A%5B100%2C1780%2C566%2C135%2C145%5D%2C%22bbrg%22%3A%5B100%2C1925%2C566%2C101%2C111%5D%7D%2C%22pageNodes%22%3A%7B%22bbm7%22%3A%5B116%2C56%2C1147%2C36%2C36%5D%2C%22bbrm%22%3A%5B100%2C2039%2C566%2C53%2C89%5D%2C%22bbrp%22%3A%5B100%2C2115%2C566%2C38%2C64%5D%2C%22bbrv%22%3A%5B100%2C2179%2C566%2C30%2C30%5D%7D%7D%2C%22hdtime%22%3A20918.721%7D%5D/cts=1657842443356/*http://yandex.ru/ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=2616.85.1928,143.2129=1657842422498,207=16386.049/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=2616.85.1928,143.2129=1657842422498,207=16386.049/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=1724,143.2129=1657842422498,207=25319.135/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=1724,143.2129=1657842422498,207=25319.135/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /search/?text=you+are+hacked+by+ach+vzlom HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Accept-CH: Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT
                                                                                                                                                                                                                                                                                                                Accept-CH-Lifetime: 31536000
                                                                                                                                                                                                                                                                                                                Cache-Control: private
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=300
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=300, no-transform
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:51:57 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:51:57 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: yandexuid=9075850111657835217; Path=/; Domain=.yandex.ru; Expires=Sat, 13 Jul 2024 21:46:57 GMT; Secure
                                                                                                                                                                                                                                                                                                                Set-Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; path=/; domain=.yandex.ru
                                                                                                                                                                                                                                                                                                                Set-Cookie: is_gdpr=1; Path=/; Domain=.yandex.ru; Expires=Sat, 13 Jul 2024 21:46:57 GMT
                                                                                                                                                                                                                                                                                                                Set-Cookie: is_gdpr_b=CNiMXhCwfhgB; Path=/; Domain=.yandex.ru; Expires=Sat, 13 Jul 2024 21:46:57 GMT
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=OwR3TwBK1tsDmPqoP1ktMypcFmu6ifG2ayy+wOklqwOGPGXj; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:46:57 GMT; secure
                                                                                                                                                                                                                                                                                                                Set-Cookie: i=vF7tdFzwf4l69xHJN3SnNaz6txxN6Wp2y8czcYoNrjO+xoBo2B1nE0WVKGClIdlSoHfTdNk2MmV5l1wynOujvxeco6o=; Expires=Sat, 13-Jul-2024 21:46:57 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                X-Yandex-Items-Count: 15
                                                                                                                                                                                                                                                                                                                X-Yandex-Req-Id: 1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907
                                                                                                                                                                                                                                                                                                                X-Yandex-STS: 1
                                                                                                                                                                                                                                                                                                                content-type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=471.143.1007/vars=-js-ready=0,-baobab-event-json=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%22bblx%22%2C%22cts%22%3A1657842443337%2C%22event-id%22%3A%22l5lol45lxf%22%2C%22mc%22%3A0%2C%22type%22%3A%22serp-page-loaded%22%2C%22data%22%3A%7B%22vis%22%3A%22visible%22%2C%22visible%22%3A%7B%22webCount%22%3A4%2C%22directCount%22%3A0%2C%22banner%22%3Afalse%7D%2C%22viewportSize%22%3A%7B%22width%22%3A1280%2C%22height%22%3A626%7D%7D%2C%22hdtime%22%3A20899.722%7D%5D/cts=1657842443337/*http://yandex.ru/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=471.143.1007/vars=-js-ready=0,-baobab-event-json=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%22bblx%22%2C%22cts%22%3A1657842443337%2C%22event-id%22%3A%22l5lol45lxf%22%2C%22mc%22%3A0%2C%22type%22%3A%22serp-page-loaded%22%2C%22data%22%3A%7B%22vis%22%3A%22visible%22%2C%22visible%22%3A%7B%22webCount%22%3A4%2C%22directCount%22%3A0%2C%22banner%22%3Afalse%7D%2C%22viewportSize%22%3A%7B%22width%22%3A1280%2C%22height%22%3A626%7D%7D%2C%22hdtime%22%3A20899.722%7D%5D/cts=1657842443337/*http://yandex.ru/ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.1033/vars=143=28.2543.153,287=10426,1484=1,2437=2771,2129=1657842422498,1036=0,1037=0,1038=0,1039=0,1040=245,1040.906=245,1310.2084=0,1310.2085=16386,1310.1309=446,1310.1007=16386,2111=0,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=245,2123=16386,2131=16832,2769=0,2770=16386/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.1033/vars=143=28.2543.153,287=10426,1484=1,2437=2771,2129=1657842422498,1036=0,1037=0,1038=0,1039=0,1040=245,1040.906=245,1310.2084=0,1310.2085=16386,1310.1309=446,1310.1007=16386,2111=0,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=245,2123=16386,2131=16832,2769=0,2770=16386/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=16201.624,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=17633.637,2136=1440.517,2322=16193.12,2428=0,143.2129=1657842422498,143.2112=0,143.2119=0/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=16201.624,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=17633.637,2136=1440.517,2322=16193.12,2428=0,143.2129=1657842422498,143.2112=0,143.2119=0/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                188.114.96.0:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /memes/da2f1ad351b86210222d977d86acd913.jpg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:01 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Content-Length: 29520
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                last-modified: Fri, 03 Jan 2020 14:05:00 GMT
                                                                                                                                                                                                                                                                                                                etag: "3a694ebaec3cfb8aab32c7bcb1cdd370"
                                                                                                                                                                                                                                                                                                                expires: Fri, 14 Jul 2023 17:03:43 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=31536000
                                                                                                                                                                                                                                                                                                                access-control-allow-origin: *
                                                                                                                                                                                                                                                                                                                CF-Cache-Status: HIT
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
                                                                                                                                                                                                                                                                                                                Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=paZv0LlcQPKryFRjLEj5IuhFKhBZyEYITmeVAN%2FCGybgS3U7HmwIv5DgmD4fchKuKw5CJZpyeAOGpv4AIlE00JrcncN43VHrjV22Qk%2F5NYd3ZAFOF69dzhLqJAvCqnnGhOwoqHqOZA%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                Server: cloudflare
                                                                                                                                                                                                                                                                                                                CF-RAY: 72ad74542a80b8dc-AMS
                                                                                                                                                                                                                                                                                                                alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/favicon.ico
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                188.114.96.0:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /favicon.ico HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 404 Not Found
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:10 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                x-powered-by: Express
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=14400
                                                                                                                                                                                                                                                                                                                CF-Cache-Status: HIT
                                                                                                                                                                                                                                                                                                                Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
                                                                                                                                                                                                                                                                                                                Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nr%2FGHSdpMHdPdqJCSUdmspwsiNdUDejW043dAVrvs6jLNdQFrHdgpUkux07uqpislKxcOpx8nNRJRq9l35TSMjVVY%2FId2afOAsW6dtP9FBE5GnT06wsEZS5vWOYq26JYIXgtrAlIZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                Server: cloudflare
                                                                                                                                                                                                                                                                                                                CF-RAY: 72ad74909e8cb8dc-AMS
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                crl.root-x1.letsencrypt.org.edgekey.net
                                                                                                                                                                                                                                                                                                                crl.root-x1.letsencrypt.org.edgekey.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                e8652.dscx.akamaiedge.net
                                                                                                                                                                                                                                                                                                                e8652.dscx.akamaiedge.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                23.2.164.159
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://x1.c.lencr.org/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                23.2.164.159:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age = 3600
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Mon, 13 Jun 2022 17:00:00 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "62a76d10-2cd"
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: x1.c.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Content-Type: application/pkix-crl
                                                                                                                                                                                                                                                                                                                Last-Modified: Mon, 13 Jun 2022 17:00:00 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62a76d10-2cd"
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:00 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                crl.root-x1.letsencrypt.org.edgekey.net
                                                                                                                                                                                                                                                                                                                crl.root-x1.letsencrypt.org.edgekey.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                e8652.dscx.akamaiedge.net
                                                                                                                                                                                                                                                                                                                e8652.dscx.akamaiedge.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                23.2.164.159
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                23.2.164.159:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/pkix-crl
                                                                                                                                                                                                                                                                                                                Last-Modified: Mon, 13 Jun 2022 17:00:00 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62a76d10-12c"
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:00 GMT
                                                                                                                                                                                                                                                                                                                Content-Length: 300
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                23.2.164.159:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/pkix-crl
                                                                                                                                                                                                                                                                                                                Last-Modified: Mon, 13 Jun 2022 17:00:00 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62a76d10-12c"
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:00 GMT
                                                                                                                                                                                                                                                                                                                Content-Length: 300
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                23.2.164.159:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/pkix-crl
                                                                                                                                                                                                                                                                                                                Last-Modified: Mon, 13 Jun 2022 17:00:00 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62a76d10-12c"
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:00 GMT
                                                                                                                                                                                                                                                                                                                Content-Length: 300
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                23.2.164.159:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/pkix-crl
                                                                                                                                                                                                                                                                                                                Last-Modified: Mon, 13 Jun 2022 17:00:00 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62a76d10-12c"
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:00 GMT
                                                                                                                                                                                                                                                                                                                Content-Length: 300
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.185
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.177
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.177
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.185
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.177
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.185
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                o.lencr.edgesuite.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.177
                                                                                                                                                                                                                                                                                                                a1887.dscq.akamai.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.110.191.185
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                104.110.191.177:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/ocsp-response
                                                                                                                                                                                                                                                                                                                Content-Length: 344
                                                                                                                                                                                                                                                                                                                ETag: "315A7AC7E9755F2AAC66CEE68E1652BC8A0CC68A4D92B5FC8D8A3AE16055F5D1"
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 06:00:00 UTC
                                                                                                                                                                                                                                                                                                                Cache-Control: public, no-transform, must-revalidate, max-age=9146
                                                                                                                                                                                                                                                                                                                Expires: Fri, 15 Jul 2022 00:19:27 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:01 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                104.110.191.177:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/ocsp-response
                                                                                                                                                                                                                                                                                                                Content-Length: 344
                                                                                                                                                                                                                                                                                                                ETag: "315A7AC7E9755F2AAC66CEE68E1652BC8A0CC68A4D92B5FC8D8A3AE16055F5D1"
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 06:00:00 UTC
                                                                                                                                                                                                                                                                                                                Cache-Control: public, no-transform, must-revalidate, max-age=9146
                                                                                                                                                                                                                                                                                                                Expires: Fri, 15 Jul 2022 00:19:27 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:01 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                104.110.191.177:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/ocsp-response
                                                                                                                                                                                                                                                                                                                Content-Length: 344
                                                                                                                                                                                                                                                                                                                ETag: "315A7AC7E9755F2AAC66CEE68E1652BC8A0CC68A4D92B5FC8D8A3AE16055F5D1"
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 06:00:00 UTC
                                                                                                                                                                                                                                                                                                                Cache-Control: public, no-transform, must-revalidate, max-age=9146
                                                                                                                                                                                                                                                                                                                Expires: Fri, 15 Jul 2022 00:19:27 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:01 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                104.110.191.185:80
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D HTTP/1.1
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                User-Agent: Microsoft-CryptoAPI/6.1
                                                                                                                                                                                                                                                                                                                Host: e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Content-Type: application/ocsp-response
                                                                                                                                                                                                                                                                                                                Content-Length: 344
                                                                                                                                                                                                                                                                                                                ETag: "315A7AC7E9755F2AAC66CEE68E1652BC8A0CC68A4D92B5FC8D8A3AE16055F5D1"
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 06:00:00 UTC
                                                                                                                                                                                                                                                                                                                Cache-Control: public, no-transform, must-revalidate, max-age=9183
                                                                                                                                                                                                                                                                                                                Expires: Fri, 15 Jul 2022 00:20:04 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:01 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                178.154.131.216
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                178.154.131.217
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                178.154.131.215
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/dVbWOMTTrHu8aMefot4W8x2fBFE.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/frontend/granny/_/dVbWOMTTrHu8aMefot4W8x2fBFE.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:04 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/javascript
                                                                                                                                                                                                                                                                                                                Content-Length: 17151
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, immutable, max-age=216013
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Etag: "de7f21ff28eed7d7c62e076ecd195951"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:46:19 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 04 Mar 2022 05:13:22 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 84e3b4929b453415
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/5UwcKr0o1HVQQuIQoqleJrV6p1U.png
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/frontend/granny/_/5UwcKr0o1HVQQuIQoqleJrV6p1U.png HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:07 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Content-Length: 457
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, immutable, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "fae0847e0b0050d313afd7b8f29532e6"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:46:07 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 10 Oct 2019 01:37:34 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 729bf23ba55031d2
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/wbPwCJSxp1hY-tA-UkZx7Jp9u4s.png
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/frontend/granny/_/wbPwCJSxp1hY-tA-UkZx7Jp9u4s.png HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:09 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Content-Length: 233
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, immutable, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "712435935e60919c00ad8e846e247fa1"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:46:23 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 03 Dec 2021 05:10:54 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 85db280f737c29b8
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/TSSesg1tFKaaKcm_kA_WyN3zShQ.png
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/frontend/granny/_/TSSesg1tFKaaKcm_kA_WyN3zShQ.png HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:09 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Content-Length: 212
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, immutable, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "6635c1b87dc794c16796be84f2bccbcf"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:42:54 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 03 Dec 2021 05:10:54 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 8e3271c4eb859cbc
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/jquery/1.8.3/jquery.min.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /jquery/1.8.3/jquery.min.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:04 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/x-javascript
                                                                                                                                                                                                                                                                                                                Content-Length: 32266
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=31556952
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Etag: "7074f7b9b8a15d0a2fa126014345987c"
                                                                                                                                                                                                                                                                                                                Expires: Fri, 30 Jun 2023 10:56:05 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Mon, 12 Nov 2018 13:13:40 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: a82ccfbd698d3973
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/l0uANig460CbaEQQScUNXHkMilg.png
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/frontend/granny/_/l0uANig460CbaEQQScUNXHkMilg.png HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:07 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Content-Length: 1060
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, immutable, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "1336862822a96c5f1848f2899f90cbdb"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:44:33 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 03 Dec 2021 05:10:54 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: dac8359665db6a59
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/1Gu0iX71epnw2o4593t2AV-FRJA.png
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/frontend/granny/_/1Gu0iX71epnw2o4593t2AV-FRJA.png HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:09 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Content-Length: 168
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, immutable, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "6c9668140ba6d671fffcc41befc0a356"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:45:11 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 10 Oct 2019 01:37:34 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 1d33aee72a4dd658
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/ndOSw56DC6Z0Hz5I1Xd8wMycfDU.png
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/frontend/granny/_/ndOSw56DC6Z0Hz5I1Xd8wMycfDU.png HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:09 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Content-Length: 250
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, immutable, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "ef4c6ca0536d9257c8891b58e0bc76d1"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:42:51 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 03 Dec 2021 05:10:54 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: bf6fe81ab4da45f2
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/react/16.8.4/react-with-dom-and-polyfills.min.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /react/16.8.4/react-with-dom-and-polyfills.min.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:06 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/javascript
                                                                                                                                                                                                                                                                                                                Content-Length: 50819
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=31556952
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Etag: "01d8d0e2844d1a61212ecb08b92ee55b"
                                                                                                                                                                                                                                                                                                                Expires: Sat, 15 Jul 2023 03:32:53 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Wed, 18 Nov 2020 09:39:47 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 0cf78513cfa4f044
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/home/fonts/ys/1/text-light.woff
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/home/fonts/ys/1/text-light.woff HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Origin: https://yandex.ru
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:07 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/font-woff
                                                                                                                                                                                                                                                                                                                Content-Length: 59970
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=31556952
                                                                                                                                                                                                                                                                                                                Etag: "fe95ed78d9ea0199fbf94de0eb9a9629"
                                                                                                                                                                                                                                                                                                                Expires: Sat, 15 Jul 2023 03:36:19 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 25 Jan 2018 09:56:45 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 6364a3165c55fd8f
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/home/fonts/ys/1/text-medium.woff
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/home/fonts/ys/1/text-medium.woff HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Origin: https://yandex.ru
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:07 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/font-woff
                                                                                                                                                                                                                                                                                                                Content-Length: 60898
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=31556952
                                                                                                                                                                                                                                                                                                                Etag: "4cf967da363adfdd893c9edf455b3925"
                                                                                                                                                                                                                                                                                                                Expires: Sat, 15 Jul 2023 03:36:19 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 25 Jan 2018 09:56:42 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 15d8a7292d69e472
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/home/fonts/ys/1/text-regular.woff
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/home/fonts/ys/1/text-regular.woff HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Origin: https://yandex.ru
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:07 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/font-woff
                                                                                                                                                                                                                                                                                                                Content-Length: 58202
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=31556952
                                                                                                                                                                                                                                                                                                                Etag: "e759fb47a2a9c31c8e94a666a9b742e6"
                                                                                                                                                                                                                                                                                                                Expires: Sat, 15 Jul 2023 03:34:46 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 25 Jan 2018 09:56:42 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 271e01ff86cfd6f1
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/home/fonts/ys/1/text-bold.woff
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/home/fonts/ys/1/text-bold.woff HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Origin: https://yandex.ru
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:08 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/font-woff
                                                                                                                                                                                                                                                                                                                Content-Length: 60770
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=31556952
                                                                                                                                                                                                                                                                                                                Etag: "e199e5b56a6575ef46e399512e1666f6"
                                                                                                                                                                                                                                                                                                                Expires: Sat, 15 Jul 2023 03:36:20 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 25 Jan 2018 09:56:42 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: f19f53dea6d2293c
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                87.250.250.145
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /search/?text=you+are+hacked+by+ach+vzlom HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Moved temporarily
                                                                                                                                                                                                                                                                                                                Location: https://yandex.ru/showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Yandex-EU-Request: 1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Content-Length: 6790
                                                                                                                                                                                                                                                                                                                Content-Type: text/html
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Yandex-EU-Request: 1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                POST
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/click
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                POST /clck/click HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Content-Type: text/plain;charset=UTF-8
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Content-Length: 930
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 400 Bad request
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:21 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/x-icon
                                                                                                                                                                                                                                                                                                                Content-Length: 1150
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "271fd5ebbf2b3529cd55563ad3e92b57"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:45:01 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 10 Jan 2019 06:01:41 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 1f7d2836141d8a59
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/gdpr/popup/v2/en_inversed_buttons.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:24 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: application/javascript
                                                                                                                                                                                                                                                                                                                Content-Length: 5457
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Etag: "fafbb056f1da08256f669240d0a19f7e"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:46:26 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 07 Dec 2021 05:52:23 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Robots-Tag: noindex, noarchive, nofollow
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.250.179.182
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.250.179.214
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.36.22
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.39.118
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                172.217.168.214
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                216.58.208.118
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                216.58.214.22
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.250.179.150
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.36.54
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                172.217.168.246
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/generate_204
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /generate_204 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 204 No Content
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:08 GMT
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.36.45
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.45:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: accounts.google.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                x-auto-login: realm=com.google&args=service%3Dyoutube%26continue%3Dhttps%253A%252F%252Fwww.youtube.com%252Fsignin%253Faction_handle_signin%253Dtrue%2526app%253Ddesktop%2526hl%253Den%2526next%253D%25252Fsignin_passive%2526feature%253Dpassive
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:09 GMT
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: script-src 'nonce-ZN3Cu3SNIWdBw8-19wnsaA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                Server: GSE
                                                                                                                                                                                                                                                                                                                Set-Cookie: __Host-GAPS=1:1gZEvl31PAQzpp61zctIhIsj_BpBMw:TSz76d9h3gyN55fA;Path=/;Expires=Sat, 13-Jul-2024 21:47:09 GMT;Secure;HttpOnly;Priority=HIGH
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/gdpr/popup/v2/en_inversed_buttons.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 07 Dec 2021 05:52:23 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "fafbb056f1da08256f669240d0a19f7e"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:36 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=3600
                                                                                                                                                                                                                                                                                                                Etag: "fafbb056f1da08256f669240d0a19f7e"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:44:09 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 07 Dec 2021 05:52:23 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Robots-Tag: noindex, noarchive, nofollow
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/islands-icons/_/aKnllxm-gQhidpzbZqub7qe641g.ico
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /islands-icons/_/aKnllxm-gQhidpzbZqub7qe641g.ico HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:20 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/x-icon
                                                                                                                                                                                                                                                                                                                Content-Length: 6518
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=216013
                                                                                                                                                                                                                                                                                                                Etag: "0d5925d86d358c44d1835e8cb8844d77"
                                                                                                                                                                                                                                                                                                                Expires: Sun, 17 Jul 2022 09:46:27 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Fri, 29 Mar 2019 12:58:53 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Nginx-Request-Id: 6c9f93d52f6a491a
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                77.88.21.36
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                87.250.250.36
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                93.158.134.36
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                213.180.204.36
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                213.180.204.91
                                                                                                                                                                                                                                                                                                                yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                87.250.250.91
                                                                                                                                                                                                                                                                                                                yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                93.158.134.91
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://favicon.yandex.net/favicon/www.secbot.org/joomlaforum.ru/otvet.mail.ru/qna.habr.com/GamesQa.ru/bestsoft.club/www.youtube.com/rxnblog.ru/xn--80adpqfl4azf.me/www.androeed.ru/hackrobloxaccount.com/FlareLand.ru/chity-majnkraft.ru/telemetr.me/RuCore.net
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.21.36:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /favicon/www.secbot.org/joomlaforum.ru/otvet.mail.ru/qna.habr.com/GamesQa.ru/bestsoft.club/www.youtube.com/rxnblog.ru/xn--80adpqfl4azf.me/www.androeed.ru/hackrobloxaccount.com/FlareLand.ru/chity-majnkraft.ru/telemetr.me/RuCore.net HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: favicon.yandex.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=691200
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                access-control-allow-origin: *
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yabs.yandex.ru/resource/spacer.gif
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                213.180.204.91:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /resource/spacer.gif HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:10 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 29 Jun 2023 21:47:10 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Wed, 18 Apr 2001 10:28:03 GMT
                                                                                                                                                                                                                                                                                                                P3P: CP="NOI DEVa TAIa OUR BUS UNI STA"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                87.250.250.119
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                87.250.251.119
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                93.158.134.119
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                77.88.21.119
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/watch.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/watch.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Content-Length: 62907
                                                                                                                                                                                                                                                                                                                Content-Type: application/javascript
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:10 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62cd4b36-f5bb"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:10 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dyou%2Bare%2Bhacked%2Bby%2Bach%2Bvzlom&page-ref=&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A2xjocdbdc4nvpvqabr08%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A846909710%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A19192143%3Arqn%3A2%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421936%3Ads%3A0%2C0%2C0%2C133%2C0%2C0%2C%2C5980%2C200%2C%2C%2C%2C6113%3Aco%3A0%3Ast%3A1657842439&t=clc(0-0-0)re(1)aw(1)rqnt(1)ti(2)
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dyou%2Bare%2Bhacked%2Bby%2Bach%2Bvzlom&page-ref=&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A2xjocdbdc4nvpvqabr08%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A846909710%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A19192143%3Arqn%3A2%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421936%3Ads%3A0%2C0%2C0%2C133%2C0%2C0%2C%2C5980%2C200%2C%2C%2C%2C6113%3Aco%3A0%3Ast%3A1657842439&t=clc(0-0-0)re(1)aw(1)rqnt(1)ti(2) HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Moved temporarily
                                                                                                                                                                                                                                                                                                                Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14-Jul-2022 21:47:21 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 14-Jul-2022 21:47:21 GMT
                                                                                                                                                                                                                                                                                                                Location: /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dyou%2Bare%2Bhacked%2Bby%2Bach%2Bvzlom&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A2xjocdbdc4nvpvqabr08%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A846909710%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A19192143%3Arqn%3A2%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421936%3Ads%3A0%2C0%2C0%2C133%2C0%2C0%2C%2C5980%2C200%2C%2C%2C%2C6113%3Aco%3A0%3Ast%3A1657842439&t=clc%280-0-0%29re%281%29aw%281%29rqnt%281%29ti%282%29
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Set-Cookie: yabs-sid=50633591657835241; Path=/
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dyou%2Bare%2Bhacked%2Bby%2Bach%2Bvzlom&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A2xjocdbdc4nvpvqabr08%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A846909710%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A19192143%3Arqn%3A2%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421936%3Ads%3A0%2C0%2C0%2C133%2C0%2C0%2C%2C5980%2C200%2C%2C%2C%2C6113%3Aco%3A0%3Ast%3A1657842439&t=clc%280-0-0%29re%281%29aw%281%29rqnt%281%29ti%282%29
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dyou%2Bare%2Bhacked%2Bby%2Bach%2Bvzlom&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A2xjocdbdc4nvpvqabr08%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A846909710%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A19192143%3Arqn%3A2%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421936%3Ads%3A0%2C0%2C0%2C133%2C0%2C0%2C%2C5980%2C200%2C%2C%2C%2C6113%3Aco%3A0%3Ast%3A1657842439&t=clc%280-0-0%29re%281%29aw%281%29rqnt%281%29ti%282%29 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239; yabs-sid=50633591657835241
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
                                                                                                                                                                                                                                                                                                                Content-Length: 167
                                                                                                                                                                                                                                                                                                                Content-Type: application/json; charset=utf-8
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14-Jul-2022 21:47:22 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 14-Jul-2022 21:47:22 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/advert.gif HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239; yabs-sid=50633591657835241
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:27 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62cd4b36-2b"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:27 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                captcha-backgrounds.s3.yandex.net
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                captcha-backgrounds.s3.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                captcha-backgrounds.s3.yandex.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                s3.yandex.net
                                                                                                                                                                                                                                                                                                                s3.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                93.158.134.158
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://captcha-backgrounds.s3.yandex.net/static/default-background.jpg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                93.158.134.158:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /static/default-background.jpg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: captcha-backgrounds.s3.yandex.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Server: nginx
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:10 GMT
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Content-Length: 339349
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=60
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Etag: "e13b184a38a4a790f522628b88d2b6c7"
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 19 Sep 2019 10:23:45 GMT
                                                                                                                                                                                                                                                                                                                X-Amz-Request-Id: 4b08c51dc385a505
                                                                                                                                                                                                                                                                                                                X-Amz-Version-Id: null
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel"}]}
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                X-Robots-Tag: noindex, noarchive, nofollow
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                188.114.96.0:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /memes/da2f1ad351b86210222d977d86acd913.jpg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Fri, 03 Jan 2020 14:05:00 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "3a694ebaec3cfb8aab32c7bcb1cdd370"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:12 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                last-modified: Fri, 03 Jan 2020 14:05:00 GMT
                                                                                                                                                                                                                                                                                                                etag: "3a694ebaec3cfb8aab32c7bcb1cdd370"
                                                                                                                                                                                                                                                                                                                expires: Fri, 14 Jul 2023 17:03:43 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=31536000
                                                                                                                                                                                                                                                                                                                access-control-allow-origin: *
                                                                                                                                                                                                                                                                                                                CF-Cache-Status: HIT
                                                                                                                                                                                                                                                                                                                Age: 670
                                                                                                                                                                                                                                                                                                                Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
                                                                                                                                                                                                                                                                                                                Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dm5DGyvjKlG936zvIlVqeDEvyrADPC3XaJR119NjSZiurTKiWcpQHOrueGNSk2fZoWMJnDRW1j%2FxXKlbwiA1Dq4FJ3En6RSV8RYrTiyvhxWlyrwI287xTr4NX8P3CHErEVm7tLVFwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                Server: cloudflare
                                                                                                                                                                                                                                                                                                                CF-RAY: 72ad749cfe7db8c1-AMS
                                                                                                                                                                                                                                                                                                                alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/tag.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/tag.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Content-Length: 79987
                                                                                                                                                                                                                                                                                                                Content-Type: application/javascript
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:12 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62cd4b36-13873"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:12 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fshowcaptcha%3Fcc%3D1%26retpath%3DaHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85%26t%3D2%2F1657835218%2F934f67e84ee009d482a39f4ed78b7f2f%26u%3D632f4534-ce07bbd5-ce31fe89-c5bd420a%26s%3D5798e0049e71ee313dcf5eabefb17de7&page-ref=&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A1hc9dnhfark4nldxqmebc%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A70440030%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A484910238%3Arqn%3A1%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421468%3Ads%3A0%2C0%2C0%2C0%2C487%2C487%2C1%2C9644%2C0%2C%2C%2C%2C10131%3Awv%3A2%3Aco%3A0%3Ast%3A1657842434&t=clc(0-0-0)aw(1)rqnt(1)ti(2)
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fshowcaptcha%3Fcc%3D1%26retpath%3DaHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85%26t%3D2%2F1657835218%2F934f67e84ee009d482a39f4ed78b7f2f%26u%3D632f4534-ce07bbd5-ce31fe89-c5bd420a%26s%3D5798e0049e71ee313dcf5eabefb17de7&page-ref=&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A1hc9dnhfark4nldxqmebc%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A70440030%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A484910238%3Arqn%3A1%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421468%3Ads%3A0%2C0%2C0%2C0%2C487%2C487%2C1%2C9644%2C0%2C%2C%2C%2C10131%3Awv%3A2%3Aco%3A0%3Ast%3A1657842434&t=clc(0-0-0)aw(1)rqnt(1)ti(2) HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Moved temporarily
                                                                                                                                                                                                                                                                                                                Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:16 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14-Jul-2022 21:47:16 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 14-Jul-2022 21:47:16 GMT
                                                                                                                                                                                                                                                                                                                Location: /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fshowcaptcha%3Fcc%3D1%26retpath%3DaHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85%26t%3D2%2F1657835218%2F934f67e84ee009d482a39f4ed78b7f2f%26u%3D632f4534-ce07bbd5-ce31fe89-c5bd420a%26s%3D5798e0049e71ee313dcf5eabefb17de7&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A1hc9dnhfark4nldxqmebc%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A70440030%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A484910238%3Arqn%3A1%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421468%3Ads%3A0%2C0%2C0%2C0%2C487%2C487%2C1%2C9644%2C0%2C%2C%2C%2C10131%3Awv%3A2%3Aco%3A0%3Ast%3A1657842434&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Set-Cookie: yabs-sid=2355361711657835236; Path=/
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fshowcaptcha%3Fcc%3D1%26retpath%3DaHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85%26t%3D2%2F1657835218%2F934f67e84ee009d482a39f4ed78b7f2f%26u%3D632f4534-ce07bbd5-ce31fe89-c5bd420a%26s%3D5798e0049e71ee313dcf5eabefb17de7&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A1hc9dnhfark4nldxqmebc%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A70440030%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A484910238%3Arqn%3A1%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421468%3Ads%3A0%2C0%2C0%2C0%2C487%2C487%2C1%2C9644%2C0%2C%2C%2C%2C10131%3Awv%3A2%3Aco%3A0%3Ast%3A1657842434&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fshowcaptcha%3Fcc%3D1%26retpath%3DaHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85%26t%3D2%2F1657835218%2F934f67e84ee009d482a39f4ed78b7f2f%26u%3D632f4534-ce07bbd5-ce31fe89-c5bd420a%26s%3D5798e0049e71ee313dcf5eabefb17de7&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A1hc9dnhfark4nldxqmebc%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A70440030%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A484910238%3Arqn%3A1%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421468%3Ads%3A0%2C0%2C0%2C0%2C487%2C487%2C1%2C9644%2C0%2C%2C%2C%2C10131%3Awv%3A2%3Aco%3A0%3Ast%3A1657842434&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; yabs-sid=2355361711657835236
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
                                                                                                                                                                                                                                                                                                                Content-Length: 167
                                                                                                                                                                                                                                                                                                                Content-Type: application/json; charset=utf-8
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:19 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14-Jul-2022 21:47:19 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Thu, 14-Jul-2022 21:47:19 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Set-Cookie: yandexuid=6344381031657835217; Expires=Fri, 14-Jul-2023 21:47:19 GMT; Domain=.yandex.ru; Path=/
                                                                                                                                                                                                                                                                                                                Set-Cookie: ymex=1689371239.yrts.1657835239; Expires=Fri, 14-Jul-2023 21:47:19 GMT; Domain=.yandex.ru; Path=/
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/advert.gif HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "62cd4b36-2b"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239; gdpr_popup=1; yabs-sid=2355361711657835236
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:30 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62cd4b36-2b"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:30 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/generate_204
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /generate_204 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 204 No Content
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:13 GMT
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.45:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: accounts.google.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: __Host-GAPS=1:1gZEvl31PAQzpp61zctIhIsj_BpBMw:TSz76d9h3gyN55fA
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                x-auto-login: realm=com.google&args=service%3Dyoutube%26continue%3Dhttps%253A%252F%252Fwww.youtube.com%252Fsignin%253Faction_handle_signin%253Dtrue%2526app%253Ddesktop%2526hl%253Den%2526next%253D%25252Fsignin_passive%2526feature%253Dpassive
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:14 GMT
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: script-src 'nonce-EtbodyWx87e76AtLgcy9xw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                Server: GSE
                                                                                                                                                                                                                                                                                                                Set-Cookie: __Host-GAPS=1:lM5dtppUigfHNz64WD3O6yQO5FfbkQ:28EJiGK8ht03X6ll;Path=/;Expires=Sat, 13-Jul-2024 21:47:14 GMT;Secure;HttpOnly;Priority=HIGH
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=2616.85.1928,143.2129=1657842421936,207=15974.169/*
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=2616.85.1928,143.2129=1657842421936,207=15974.169/* HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217802485-11461928145834438103-sas2-0259-2ea-sas-l7-balancer-8080-BAL-8739; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=SJbeOTI/Yv8WsOMNZrJXNZrLDtFqCz+9ql7BBbGBWPpHUEDB; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.0 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=LfwHUYmitYj/2V7nFejIA0G6yjtjkJNQIrHKuCafTSPHe51r65I=; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:47:20 GMT; secure
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 3698
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 38934
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 14276
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/generate_204
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /generate_204 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 204 No Content
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:20 GMT
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 35595
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 55950
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 22859
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 4234
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/watch.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/watch.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "62cd4b36-f5bb"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=LfwHUYmitYj/2V7nFejIA0G6yjtjkJNQIrHKuCafTSPHe51r65I=; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/advert.gif HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "62cd4b36-2b"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: ys=wprid.1657835217584774-9008640090807585011-sas2-2338-sas-l7-balancer-8080-BAL-7907; yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239; gdpr_popup=1
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://favicon.yandex.net/favicon/www.secbot.org/joomlaforum.ru/qna.habr.com/bestsoft.club/GamesQa.ru/steamcommunity.com/otvet.mail.ru/xn--80adpqfl4azf.me/t.me/wdfiles.ru/www.youtube.com/vzlomvk.social/FlareLand.ru/rxnblog.ru/hackrobloxaccount.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.21.36:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /favicon/www.secbot.org/joomlaforum.ru/qna.habr.com/bestsoft.club/GamesQa.ru/steamcommunity.com/otvet.mail.ru/xn--80adpqfl4azf.me/t.me/wdfiles.ru/www.youtube.com/vzlomvk.social/FlareLand.ru/rxnblog.ru/hackrobloxaccount.com HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: favicon.yandex.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=691200
                                                                                                                                                                                                                                                                                                                Content-Type: image/png
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                access-control-allow-origin: *
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/generate_204
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /generate_204 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 204 No Content
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:21 GMT
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 35595
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 38934
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 9386
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                If-None-Match: "0"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                Vary: origin
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                If-None-Match: "0"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                Vary: origin
                                                                                                                                                                                                                                                                                                                Age: 3
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 3698
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 55950
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 4234
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.250.179.162
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:23 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id?slf_rd=1 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Content-Type: application/json; charset=UTF-8
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:24 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Content-Disposition: attachment; filename="f.txt"
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.45:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: accounts.google.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: __Host-GAPS=1:lM5dtppUigfHNz64WD3O6yQO5FfbkQ:28EJiGK8ht03X6ll
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                x-auto-login: realm=com.google&args=service%3Dyoutube%26continue%3Dhttps%253A%252F%252Fwww.youtube.com%252Fsignin%253Faction_handle_signin%253Dtrue%2526app%253Ddesktop%2526hl%253Den%2526next%253D%25252Fsignin_passive%2526feature%253Dpassive
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:23 GMT
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: script-src 'nonce-uaeQCZiCxgKGXv0BUQ2TLw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                Server: GSE
                                                                                                                                                                                                                                                                                                                Set-Cookie: __Host-GAPS=1:_LENC5Jp5d5IW_lyQWxODBcor2WpOA:IAc11VpReGH0s0aW;Path=/;Expires=Sat, 13-Jul-2024 21:47:23 GMT;Secure;HttpOnly;Priority=HIGH
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.45:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: accounts.google.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: __Host-GAPS=1:_LENC5Jp5d5IW_lyQWxODBcor2WpOA:IAc11VpReGH0s0aW
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                x-auto-login: realm=com.google&args=service%3Dyoutube%26continue%3Dhttps%253A%252F%252Fwww.youtube.com%252Fsignin%253Faction_handle_signin%253Dtrue%2526app%253Ddesktop%2526hl%253Den%2526next%253D%25252Fsignin_passive%2526feature%253Dpassive
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:25 GMT
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: script-src 'nonce-9iX0h3Zd4NTwzJ6bSYvvAg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                Server: GSE
                                                                                                                                                                                                                                                                                                                Set-Cookie: __Host-GAPS=1:kf6F3JWzqbCeq5GU-sKSBnfYLfNxQQ:foPuFSLlnkjvd101;Path=/;Expires=Sat, 13-Jul-2024 21:47:25 GMT;Secure;HttpOnly;Priority=HIGH
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                www.microsoft.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                www.microsoft.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                www.microsoft.com
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                www.microsoft.com-c-3.edgekey.net
                                                                                                                                                                                                                                                                                                                www.microsoft.com-c-3.edgekey.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                                                                                                                                                                                                                                                                                                                www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                e13678.dscb.akamaiedge.net
                                                                                                                                                                                                                                                                                                                e13678.dscb.akamaiedge.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                104.123.41.162
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:31 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id?slf_rd=1 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Content-Type: application/json; charset=UTF-8
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:31 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Content-Disposition: attachment; filename="f.txt"
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:32 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id?slf_rd=1 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Content-Type: application/json; charset=UTF-8
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:32 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Content-Disposition: attachment; filename="f.txt"
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:34 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id?slf_rd=1 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Content-Type: application/json; charset=UTF-8
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:34 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Content-Disposition: attachment; filename="f.txt"
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 3698
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 55950
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 9386
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/generate_204
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /generate_204 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 204 No Content
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:34 GMT
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 35595
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 38934
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 4234
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                If-None-Match: "0"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                Vary: origin
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                If-None-Match: "0"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                Vary: origin
                                                                                                                                                                                                                                                                                                                Age: 3
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/tag.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/tag.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "62cd4b36-13873"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Content-Length: 79987
                                                                                                                                                                                                                                                                                                                Content-Type: application/javascript
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:35 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62cd4b36-13873"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:35 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                87.250.250.119:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /metrika/advert.gif HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: mc.yandex.ru
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "62cd4b36-2b"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239; gdpr_popup=1
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Length: 43
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                ETag: "62cd4b36-2b"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:47:43 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 12 Jul 2022 13:21:42 GMT
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/gdpr/popup/v2/en_inversed_buttons.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 07 Dec 2021 05:52:23 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "fafbb056f1da08256f669240d0a19f7e"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:34 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=3600
                                                                                                                                                                                                                                                                                                                Etag: "fafbb056f1da08256f669240d0a19f7e"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:44:09 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 07 Dec 2021 05:52:23 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Robots-Tag: noindex, noarchive, nofollow
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.250.179.142
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=8_SF3Zd7PEs; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 301 Moved Permanently
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:47:38 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:38 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=31536000
                                                                                                                                                                                                                                                                                                                Location: https://www.youtube.com/
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin-allow-popups; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=2kGDs_X6mBc; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:37 GMT
                                                                                                                                                                                                                                                                                                                Location: https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin-allow-popups; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=2kGDs_X6mBc; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 301 Moved Permanently
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:47:37 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:37 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=31536000
                                                                                                                                                                                                                                                                                                                Location: https://www.youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.45:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: accounts.google.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: __Host-GAPS=1:kf6F3JWzqbCeq5GU-sKSBnfYLfNxQQ:foPuFSLlnkjvd101
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                x-auto-login: realm=com.google&args=service%3Dyoutube%26continue%3Dhttps%253A%252F%252Fwww.youtube.com%252Fsignin%253Faction_handle_signin%253Dtrue%2526app%253Ddesktop%2526hl%253Den%2526next%253D%25252Fsignin_passive%2526feature%253Dpassive
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:37 GMT
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: require-trusted-types-for 'script';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Content-Security-Policy: script-src 'nonce-Hy2PMCHPFieEV8gIF-bJmw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_gse_qebhlk"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                                                Server: GSE
                                                                                                                                                                                                                                                                                                                Set-Cookie: __Host-GAPS=1:YqXV7z3GFKUMYDMPZVM2P9fG03jheA:y7UYfCoANeWm8Qoz;Path=/;Expires=Sat, 13-Jul-2024 21:47:37 GMT;Secure;HttpOnly;Priority=HIGH
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=ft2DCn070eQ; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                Location: https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin-allow-popups; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=ft2DCn070eQ; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0; hideBrowserUpgradeBox=true
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 301 Moved Permanently
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=31536000
                                                                                                                                                                                                                                                                                                                Location: https://www.youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                178.154.131.216:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /s3/gdpr/popup/v2/en_inversed_buttons.js HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: application/javascript, */*;q=0.8
                                                                                                                                                                                                                                                                                                                Referer: https://yandex.ru/showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yastatic.net
                                                                                                                                                                                                                                                                                                                If-Modified-Since: Tue, 07 Dec 2021 05:52:23 GMT
                                                                                                                                                                                                                                                                                                                If-None-Match: "fafbb056f1da08256f669240d0a19f7e"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Server: nginx/1.17.9
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                Connection: keep-alive
                                                                                                                                                                                                                                                                                                                Keep-Alive: timeout=5
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=3600
                                                                                                                                                                                                                                                                                                                Etag: "fafbb056f1da08256f669240d0a19f7e"
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:46:26 GMT
                                                                                                                                                                                                                                                                                                                Last-Modified: Tue, 07 Dec 2021 05:52:23 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=43200000; includeSubDomains;
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Vary: Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Robots-Tag: noindex, noarchive, nofollow
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=H0wxfu5PeU4; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0; hideBrowserUpgradeBox=true
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                Location: https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin-allow-popups; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=H0wxfu5PeU4; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0; hideBrowserUpgradeBox=true
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 301 Moved Permanently
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:43 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=31536000
                                                                                                                                                                                                                                                                                                                Location: https://www.youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:46 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.162:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/id?slf_rd=1 HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                                                Content-Type: application/json; charset=UTF-8
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:46 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Content-Disposition: attachment; filename="f.txt"
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET / HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=k0O97gYl9nk; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0; hideBrowserUpgradeBox=true
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 302 Found
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:47 GMT
                                                                                                                                                                                                                                                                                                                Location: https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin-allow-popups; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.142:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: */*
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Host: youtube.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: YSC=k0O97gYl9nk; VISITOR_INFO1_LIVE=2EDBurpSF9I; PREF=utco=0; hideBrowserUpgradeBox=true
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 301 Moved Permanently
                                                                                                                                                                                                                                                                                                                Content-Type: application/binary
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:47:48 GMT
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:47:48 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=31536000
                                                                                                                                                                                                                                                                                                                Location: https://www.youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                                                Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
                                                                                                                                                                                                                                                                                                                Server: ESF
                                                                                                                                                                                                                                                                                                                Content-Length: 0
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-ru
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yandex.ru/images/search?text=trollface
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                77.88.55.70:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /images/search?text=trollface HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: text/html, application/xhtml+xml, */*
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yandex.ru
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Cookie: yandexuid=6344381031657835217; is_gdpr=1; is_gdpr_b=CNiMXhCwfhgB; _yasc=YzWEdxqvM2mT78Xq/EoiCws8c2UwcgxIxN6L5KjQhoa5/uHkjM3zBg==; i=hot2AsiBCUX7eGpiWuSG678RgI+fyM9M72nQHnrCGLYxfyNa0q0DuYx16QjXzCrYT78AhCdLOY0lAowhRFR7omLk8zY=; spravka=dD0xNjI2Mjk5MjE4O2k9MTU0LjYxLjcxLjUwO0Q9OUVDQzQ4QUE3RUZBREYzMjdEN0I4QTVEMzIyOTE2QjU3RDI4QUM3MUE2OEI1QzlFNjEwRjkzRDE0NDY0MTNCMzU3NzAwMTY4O3U9MTYyNjI5OTIxODAxNDE2MjE5NztoPWU5ZmY4YjU1NWYyNzg4YzMwOTQ1OTRiZTg2MzA1ZDk0; ymex=1689371239.yrts.1657835239
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 Ok
                                                                                                                                                                                                                                                                                                                Cache-Control: private
                                                                                                                                                                                                                                                                                                                Cache-Control: private, max-age=3600
                                                                                                                                                                                                                                                                                                                Content-Encoding: gzip
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:09 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 22:48:09 GMT
                                                                                                                                                                                                                                                                                                                NEL: {"report_to": "network-errors", "max_age": 86400, "success_fraction": 0.001, "failure_fraction": 0.1}
                                                                                                                                                                                                                                                                                                                Report-To: { "group": "network-errors", "max_age": 86400, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]}
                                                                                                                                                                                                                                                                                                                Set-Cookie: _yasc=80J85DmirH0yYsiggu7B2sz2snKSLBahzf4nme43XrqPyCYID0ITjfg9; domain=.yandex.ru; path=/; expires=Sat, 13-Aug-2022 21:48:09 GMT; secure
                                                                                                                                                                                                                                                                                                                Strict-Transport-Security: max-age=31536000; includeSubDomains
                                                                                                                                                                                                                                                                                                                Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                                                Vary: User-Agent,Accept-Encoding
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                                                X-Yandex-Items-Count: 30
                                                                                                                                                                                                                                                                                                                X-Yandex-Req-Id: 1657835289882925-9002437011408980673-sas6-5261-bf6-sas-l7-balancer-8080-BAL-1491
                                                                                                                                                                                                                                                                                                                X-Yandex-STS: 1
                                                                                                                                                                                                                                                                                                                content-type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 7894
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 10100
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:53:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=300
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 22859
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 14276
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 10100
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:53:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=300
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 14276
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 22859
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 7894
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                photos-ugc.l.googleusercontent.com
                                                                                                                                                                                                                                                                                                                photos-ugc.l.googleusercontent.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.36.1
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 7894
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                If-None-Match: "0"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                Vary: origin
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                If-None-Match: "0"
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 304 Not Modified
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                Vary: origin
                                                                                                                                                                                                                                                                                                                Age: 3
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 10100
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:53:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=300
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                photos-ugc.l.googleusercontent.com
                                                                                                                                                                                                                                                                                                                photos-ugc.l.googleusercontent.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.36.1
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.1:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Access-Control-Expose-Headers: Content-Length
                                                                                                                                                                                                                                                                                                                Content-Disposition: inline;filename="channels4_profile.jpg"
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: fife
                                                                                                                                                                                                                                                                                                                Content-Length: 3390
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 20:42:05 GMT
                                                                                                                                                                                                                                                                                                                Expires: Mon, 11 Jul 2022 10:43:54 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=86400, no-transform
                                                                                                                                                                                                                                                                                                                Age: 3978
                                                                                                                                                                                                                                                                                                                ETag: "v1"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.1:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Access-Control-Expose-Headers: Content-Length
                                                                                                                                                                                                                                                                                                                Content-Disposition: inline;filename="channels4_profile.jpg"
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: fife
                                                                                                                                                                                                                                                                                                                Content-Length: 3390
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 20:42:05 GMT
                                                                                                                                                                                                                                                                                                                Expires: Mon, 11 Jul 2022 10:43:54 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=86400, no-transform
                                                                                                                                                                                                                                                                                                                Age: 3978
                                                                                                                                                                                                                                                                                                                ETag: "v1"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 9386
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.1:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Access-Control-Expose-Headers: Content-Length
                                                                                                                                                                                                                                                                                                                Content-Disposition: inline;filename="channels4_profile.jpg"
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: fife
                                                                                                                                                                                                                                                                                                                Content-Length: 3390
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 20:42:05 GMT
                                                                                                                                                                                                                                                                                                                Expires: Mon, 11 Jul 2022 10:43:54 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=86400, no-transform
                                                                                                                                                                                                                                                                                                                Age: 3978
                                                                                                                                                                                                                                                                                                                ETag: "v1"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 3698
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 2
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 55950
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 2
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 7894
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 38934
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 67504
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 10753
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 22859
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 4234
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 10100
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 21:53:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=300
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 14276
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:22 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:22 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 1
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 35595
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:21 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:21 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Age: 2
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.250.179.182:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: i.ytimg.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
                                                                                                                                                                                                                                                                                                                Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Content-Length: 9386
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:23 GMT
                                                                                                                                                                                                                                                                                                                Expires: Thu, 14 Jul 2022 23:48:23 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=7200
                                                                                                                                                                                                                                                                                                                ETag: "0"
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: sffe
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.1:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                Access-Control-Expose-Headers: Content-Length
                                                                                                                                                                                                                                                                                                                Content-Disposition: inline;filename="channels4_profile.jpg"
                                                                                                                                                                                                                                                                                                                Vary: Origin
                                                                                                                                                                                                                                                                                                                Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: fife
                                                                                                                                                                                                                                                                                                                Content-Length: 3390
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 20:42:05 GMT
                                                                                                                                                                                                                                                                                                                Expires: Mon, 11 Jul 2022 10:43:54 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: public, max-age=86400, no-transform
                                                                                                                                                                                                                                                                                                                Age: 3978
                                                                                                                                                                                                                                                                                                                ETag: "v1"
                                                                                                                                                                                                                                                                                                                Content-Type: image/jpeg
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.36.3
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.google.nl/pagead/lvz?evtid=ADKXDuaeXTNqznkGuC15k-MJVNgxqEpmxktPHQ8oKY7STg2ADfgDwMDZWp0lYzS2pAOLuch4QLTtKKWjH5cDFadf_slQM3Cwhw&req_ts=1657835219&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdP83xERfoCRXgNtQlJFXj2K3vih0A
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.3:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/lvz?evtid=ADKXDuaeXTNqznkGuC15k-MJVNgxqEpmxktPHQ8oKY7STg2ADfgDwMDZWp0lYzS2pAOLuch4QLTtKKWjH5cDFadf_slQM3Cwhw&req_ts=1657835219&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdP83xERfoCRXgNtQlJFXj2K3vih0A HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: www.google.nl
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:27 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 42
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.google.nl/pagead/lvz?evtid=ADKXDubSsJtpG_-gZ1ffF-T4orlZf7RvQBy4NCE3Sh-xYXP7I2yjYGQ1TmGSHzt4H2j_etrMj8eC8DAgKz4kcun4Yit44Y1Upw&req_ts=1657835216&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdNpMAUmTNw-5YpvrBwwnBXlt8wmRg
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.3:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/lvz?evtid=ADKXDubSsJtpG_-gZ1ffF-T4orlZf7RvQBy4NCE3Sh-xYXP7I2yjYGQ1TmGSHzt4H2j_etrMj8eC8DAgKz4kcun4Yit44Y1Upw&req_ts=1657835216&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdNpMAUmTNw-5YpvrBwwnBXlt8wmRg HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: www.google.nl
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:27 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 42
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-nl
                                                                                                                                                                                                                                                                                                                GET
                                                                                                                                                                                                                                                                                                                https://www.google.nl/pagead/lvz?evtid=ADKXDua4wiCc0efA2IAXUGXz3A1SlQvZJ_2eAhKE6qYeoONjoStQOPwvMyO4N5x6y_5NS_q0IOulb2BjJwXUfavRb4-hNCtwyg&req_ts=1657835231&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdMkfBwX4MxGXU0cGc2nCD6sdzLk2w
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                142.251.36.3:443
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                GET /pagead/lvz?evtid=ADKXDua4wiCc0efA2IAXUGXz3A1SlQvZJ_2eAhKE6qYeoONjoStQOPwvMyO4N5x6y_5NS_q0IOulb2BjJwXUfavRb4-hNCtwyg&req_ts=1657835231&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdMkfBwX4MxGXU0cGc2nCD6sdzLk2w HTTP/1.1
                                                                                                                                                                                                                                                                                                                Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
                                                                                                                                                                                                                                                                                                                Referer: https://www.youtube.com/channel/UC6qeIOiQYuevWysxR91eEZA
                                                                                                                                                                                                                                                                                                                Accept-Language: en-US
                                                                                                                                                                                                                                                                                                                User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
                                                                                                                                                                                                                                                                                                                Accept-Encoding: gzip, deflate
                                                                                                                                                                                                                                                                                                                Host: www.google.nl
                                                                                                                                                                                                                                                                                                                Connection: Keep-Alive
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                HTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                                                P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
                                                                                                                                                                                                                                                                                                                Timing-Allow-Origin: *
                                                                                                                                                                                                                                                                                                                Cross-Origin-Resource-Policy: cross-origin
                                                                                                                                                                                                                                                                                                                Content-Type: image/gif
                                                                                                                                                                                                                                                                                                                Date: Thu, 14 Jul 2022 21:48:27 GMT
                                                                                                                                                                                                                                                                                                                Pragma: no-cache
                                                                                                                                                                                                                                                                                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                                                Cache-Control: no-cache, must-revalidate
                                                                                                                                                                                                                                                                                                                X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                                                Server: cafe
                                                                                                                                                                                                                                                                                                                Content-Length: 42
                                                                                                                                                                                                                                                                                                                X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                serp-static-testing.s3.yandex.net
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                serp-static-testing.s3.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                serp-static-testing.s3.yandex.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                s3.yandex.net
                                                                                                                                                                                                                                                                                                                s3.yandex.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                93.158.134.158
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                jnn-pa.googleapis.com
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                jnn-pa.googleapis.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                jnn-pa.googleapis.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.39.106
                                                                                                                                                                                                                                                                                                              • flag-us
                                                                                                                                                                                                                                                                                                                DNS
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                Remote address:
                                                                                                                                                                                                                                                                                                                8.8.8.8:53
                                                                                                                                                                                                                                                                                                                Request
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                IN CNAME
                                                                                                                                                                                                                                                                                                                static-doubleclick-net.l.google.com
                                                                                                                                                                                                                                                                                                                static-doubleclick-net.l.google.com
                                                                                                                                                                                                                                                                                                                IN A
                                                                                                                                                                                                                                                                                                                142.251.36.38
                                                                                                                                                                                                                                                                                                              • 18.198.77.177:10296
                                                                                                                                                                                                                                                                                                                4.tcp.eu.ngrok.io
                                                                                                                                                                                                                                                                                                                jopa.exe
                                                                                                                                                                                                                                                                                                                9.5kB
                                                                                                                                                                                                                                                                                                                2.2kB
                                                                                                                                                                                                                                                                                                                36
                                                                                                                                                                                                                                                                                                                47
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.1033/vars=143=28.2543.153,287=10426,1484=1,2437=2771,2129=1657842421936,1036=0,1037=0,1038=0,1039=0,1040=132,1040.906=132,1310.2084=0,1310.2085=6112,1310.1309=201,1310.1007=6112,2111=0,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=132,2123=6112,2131=6313,2769=0,2770=6112/*
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                9.4kB
                                                                                                                                                                                                                                                                                                                34.7kB
                                                                                                                                                                                                                                                                                                                29
                                                                                                                                                                                                                                                                                                                39

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=471.143.1007/vars=-js-ready=0,-baobab-event-json=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%229api%22%2C%22cts%22%3A1657842437903%2C%22event-id%22%3A%22l5lokzynju%22%2C%22mc%22%3A0%2C%22type%22%3A%22serp-page-loaded%22%2C%22data%22%3A%7B%22vis%22%3A%22visible%22%2C%22visible%22%3A%7B%22webCount%22%3A4%2C%22directCount%22%3A0%2C%22banner%22%3Afalse%7D%2C%22viewportSize%22%3A%7B%22width%22%3A1280%2C%22height%22%3A626%7D%7D%2C%22hdtime%22%3A15974.92%7D%5D/cts=1657842437903/*http://yandex.ru/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.1033/vars=143=28.2543.153,287=10426,1484=1,2437=2771,2129=1657842421936,1036=0,1037=0,1038=0,1039=0,1040=132,1040.906=132,1310.2084=0,1310.2085=6112,1310.1309=201,1310.1007=6112,2111=0,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=132,2123=6112,2131=6313,2769=0,2770=6112/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=6112.479,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=6831.498,2136=721.973,2322=6109.525,2428=0,143.2129=1657842421936,143.2112=0,143.2119=0/*
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                8.7kB
                                                                                                                                                                                                                                                                                                                6.9kB
                                                                                                                                                                                                                                                                                                                16
                                                                                                                                                                                                                                                                                                                18

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/events=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%229api%22%2C%22cts%22%3A1657842437913%2C%22event-id%22%3A%22l5lokzyxb2%22%2C%22mc%22%3A0%2C%22type%22%3A%22coords%22%2C%22data%22%3A%7B%22nodes%22%3A%7B%229asb%22%3A%5B100%2C109%2C566%2C135%2C145%5D%2C%229asi%22%3A%5B100%2C254%2C566%2C101%2C111%5D%2C%229asp%22%3A%5B100%2C365%2C566%2C142%2C152%5D%2C%229asx%22%3A%5B100%2C517%2C566%2C118%2C128%5D%2C%229at4%22%3A%5B100%2C645%2C566%2C135%2C145%5D%2C%229atb%22%3A%5B100%2C790%2C566%2C118%2C128%5D%2C%229ati%22%3A%5B100%2C918%2C566%2C84%2C94%5D%2C%229atp%22%3A%5B100%2C1012%2C566%2C135%2C145%5D%2C%229atv%22%3A%5B100%2C1157%2C566%2C118%2C128%5D%2C%229au1%22%3A%5B100%2C1285%2C566%2C135%2C145%5D%2C%229au8%22%3A%5B100%2C1430%2C566%2C101%2C111%5D%2C%229aue%22%3A%5B100%2C1541%2C566%2C118%2C128%5D%2C%229aul%22%3A%5B100%2C1669%2C566%2C101%2C111%5D%2C%229aus%22%3A%5B100%2C1780%2C566%2C101%2C111%5D%2C%229auz%22%3A%5B100%2C1891%2C566%2C118%2C128%5D%7D%2C%22pageNodes%22%3A%7B%229aps%22%3A%5B116%2C56%2C1147%2C36%2C36%5D%2C%229av6%22%3A%5B100%2C2022%2C566%2C53%2C89%5D%2C%229av9%22%3A%5B100%2C2098%2C566%2C38%2C64%5D%2C%229avf%22%3A%5B100%2C2162%2C566%2C30%2C30%5D%7D%7D%2C%22hdtime%22%3A15984.854%7D%5D/cts=1657842437913/*http://yandex.ru/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=1724,143.2129=1657842421936,207=15925.484/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=6112.479,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=6831.498,2136=721.973,2322=6109.525,2428=0,143.2129=1657842421936,143.2112=0,143.2119=0/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/click
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                8.3kB
                                                                                                                                                                                                                                                                                                                269.3kB
                                                                                                                                                                                                                                                                                                                107
                                                                                                                                                                                                                                                                                                                202

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/captcha_smart_error.min.js?k=1632998364813

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/captcha_smart.min.js?k=1632998364813

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                POST https://yandex.ru/clck/click

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                400
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/favicon.ico
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.5kB
                                                                                                                                                                                                                                                                                                                40.1kB
                                                                                                                                                                                                                                                                                                                26
                                                                                                                                                                                                                                                                                                                35

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/showcaptcha?cc=1&retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835218/934f67e84ee009d482a39f4ed78b7f2f&u=632f4534-ce07bbd5-ce31fe89-c5bd420a&s=5798e0049e71ee313dcf5eabefb17de7

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/captcha_smart.min.css?k=1632998364813

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/favicon.ico

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                301
                                                                                                                                                                                                                                                                                                              • 188.114.96.0:443
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/favicon.ico
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.2kB
                                                                                                                                                                                                                                                                                                                43.1kB
                                                                                                                                                                                                                                                                                                                30
                                                                                                                                                                                                                                                                                                                48

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.meme-arsenal.com/favicon.ico

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                404
                                                                                                                                                                                                                                                                                                              • 188.114.96.0:443
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                757 B
                                                                                                                                                                                                                                                                                                                5.1kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                12
                                                                                                                                                                                                                                                                                                              • 104.110.191.201:80
                                                                                                                                                                                                                                                                                                                http://apps.identrust.com/roots/dstrootcax3.p7c
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                369 B
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://apps.identrust.com/roots/dstrootcax3.p7c

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 104.110.191.182:80
                                                                                                                                                                                                                                                                                                                http://apps.identrust.com/roots/dstrootcax3.p7c
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                369 B
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://apps.identrust.com/roots/dstrootcax3.p7c

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=1724,143.2129=1657842422498,207=25319.135/*
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                8.7kB
                                                                                                                                                                                                                                                                                                                7.0kB
                                                                                                                                                                                                                                                                                                                18
                                                                                                                                                                                                                                                                                                                16

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/events=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%22bblx%22%2C%22cts%22%3A1657842443356%2C%22event-id%22%3A%22l5lol4641o%22%2C%22mc%22%3A0%2C%22type%22%3A%22coords%22%2C%22data%22%3A%7B%22nodes%22%3A%7B%22bboq%22%3A%5B100%2C109%2C566%2C135%2C145%5D%2C%22bbox%22%3A%5B100%2C254%2C566%2C101%2C111%5D%2C%22bbp4%22%3A%5B100%2C365%2C566%2C118%2C128%5D%2C%22bbpb%22%3A%5B100%2C493%2C566%2C118%2C128%5D%2C%22bbpi%22%3A%5B100%2C621%2C566%2C135%2C145%5D%2C%22bbpp%22%3A%5B100%2C766%2C566%2C118%2C128%5D%2C%22bbpy%22%3A%5B100%2C894%2C566%2C125%2C135%5D%2C%22bbq5%22%3A%5B100%2C1029%2C566%2C118%2C128%5D%2C%22bbqb%22%3A%5B100%2C1157%2C566%2C135%2C145%5D%2C%22bbqi%22%3A%5B100%2C1302%2C566%2C101%2C111%5D%2C%22bbqp%22%3A%5B100%2C1413%2C566%2C84%2C94%5D%2C%22bbqw%22%3A%5B100%2C1507%2C566%2C135%2C145%5D%2C%22bbr3%22%3A%5B100%2C1652%2C566%2C118%2C128%5D%2C%22bbra%22%3A%5B100%2C1780%2C566%2C135%2C145%5D%2C%22bbrg%22%3A%5B100%2C1925%2C566%2C101%2C111%5D%7D%2C%22pageNodes%22%3A%7B%22bbm7%22%3A%5B116%2C56%2C1147%2C36%2C36%5D%2C%22bbrm%22%3A%5B100%2C2039%2C566%2C53%2C89%5D%2C%22bbrp%22%3A%5B100%2C2115%2C566%2C38%2C64%5D%2C%22bbrv%22%3A%5B100%2C2179%2C566%2C30%2C30%5D%7D%7D%2C%22hdtime%22%3A20918.721%7D%5D/cts=1657842443356/*http://yandex.ru/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=2616.85.1928,143.2129=1657842422498,207=16386.049/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=1724,143.2129=1657842422498,207=25319.135/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=16201.624,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=17633.637,2136=1440.517,2322=16193.12,2428=0,143.2129=1657842422498,143.2112=0,143.2119=0/*
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                9.0kB
                                                                                                                                                                                                                                                                                                                33.3kB
                                                                                                                                                                                                                                                                                                                28
                                                                                                                                                                                                                                                                                                                37

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=471.143.1007/vars=-js-ready=0,-baobab-event-json=%5B%7B%22event%22%3A%22tech%22%2C%22id%22%3A%22bblx%22%2C%22cts%22%3A1657842443337%2C%22event-id%22%3A%22l5lol45lxf%22%2C%22mc%22%3A0%2C%22type%22%3A%22serp-page-loaded%22%2C%22data%22%3A%7B%22vis%22%3A%22visible%22%2C%22visible%22%3A%7B%22webCount%22%3A4%2C%22directCount%22%3A0%2C%22banner%22%3Afalse%7D%2C%22viewportSize%22%3A%7B%22width%22%3A1280%2C%22height%22%3A626%7D%7D%2C%22hdtime%22%3A20899.722%7D%5D/cts=1657842443337/*http://yandex.ru/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.1033/vars=143=28.2543.153,287=10426,1484=1,2437=2771,2129=1657842422498,1036=0,1037=0,1038=0,1039=0,1040=245,1040.906=245,1310.2084=0,1310.2085=16386,1310.1309=446,1310.1007=16386,2111=0,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=245,2123=16386,2131=16832,2769=0,2770=16386/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFD8NL4DImVS-4HBniWL0rSzYGcqz-yZSNa4OP7URCSUtz7b6l7SrWQ7--9mnTbvMb6Q6294mdeim-IcInlqyZ22UzGLCsMKrUR9lnbKSJpPp-catN6qCG6_r8TbWf4rOZ2ZmgPR9Ptizg3EVhz95Sr9V4AVsnaPW_0Y386eFuf0men76R6ujNMt8exmrNZ3egj24mLTRmPukmQZV-SuQjdqV31gHEFYY9a8QtXDXHjn_J10Hznn527gCsqxOCRF8uxpnDESABc7KhISCN9tLV8cCdciBNWm8I5Ao_ELOyCDkykqyQKUFfIsZGQA2AZ3Ne0_pRh2bOSalOdwEKHB49w08VjjaKml5OX5Rx67Jdvmt7fK0S6cuRZ3KqwHPppg32PfwYEgV1OKdrO4WUE1eAr_orXHtIUxuBq3NwSvR4960pmdEvPPD_wP6fQoE8NRh4Gg0-69lX5tyI5Nbgiwc5xnbjMxDzSpTE6PQnsldXCPoO-Zu1qnQFw0DfeXDsmlINBYzOW54JA3uGWWzOhNxjmSVQHBPiH2ReDFxg39nqNeqBnWHiBp6yUjcwKJFFcNmneErsQjHKpADlWmlRCr2Io6XKN09gEWCs5298jBEYXogz18vSZ0N8CEjrlgESCmABja2YiYIN7YSqo6IG_QhkEdyHCwWNnE-JfTvo78L3dMZ8gTUOrA9ZZgC7o2ZVpPJnT8lagvT8FZNopL2P1TLLBVjjYoIrZMDSWxU2RUHL7yPmL-eRgPm_bng_sLPVUWxZYf_XaVgBBcdY3SsfcZ8pO4wwbQydotdBLGEc_iAQ4lNSWR432i-GO7WmwBg9uGwucR83SbcAMuOLNORslhrH5QWCxgFWEES8nlofawGYGVbTsaV6x7U_V00VJeyP6rpplJ55JFKUuQqWw8WoTIhuo1Fh1s9KXBYEO-R5b8qC8mOl9p6lTz621x-cvOLWs5llR57Sm4VFIEGuLGj4RvurzUzFAttTac0_ZF7Y4pQ-7Dw4oEAYN59k-uUQbJWqkm2FQ,,/sign=0b3305547527a92bb5423f09ff06294e/keyno=0/path=690.2096.2044/vars=143=28.2543.153,287=10426,1701=1218,2111=16201.624,2112=0,2113=0,2114=0,2116=0,2117=0,2119=0,2120=17633.637,2136=1440.517,2322=16193.12,2428=0,143.2129=1657842422498,143.2112=0,143.2119=0/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 188.114.96.0:443
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                671 B
                                                                                                                                                                                                                                                                                                                5.1kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                              • 188.114.96.0:443
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/favicon.ico
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.2kB
                                                                                                                                                                                                                                                                                                                42.5kB
                                                                                                                                                                                                                                                                                                                30
                                                                                                                                                                                                                                                                                                                47

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.meme-arsenal.com/favicon.ico

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                404
                                                                                                                                                                                                                                                                                                              • 23.2.164.159:80
                                                                                                                                                                                                                                                                                                                http://x1.c.lencr.org/
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                462 B
                                                                                                                                                                                                                                                                                                                698 B
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://x1.c.lencr.org/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 23.2.164.159:80
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                350 B
                                                                                                                                                                                                                                                                                                                1.4kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://x2.c.lencr.org/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 23.2.164.159:80
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                350 B
                                                                                                                                                                                                                                                                                                                1.4kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://x2.c.lencr.org/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 23.2.164.159:80
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                350 B
                                                                                                                                                                                                                                                                                                                1.4kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://x2.c.lencr.org/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 23.2.164.159:80
                                                                                                                                                                                                                                                                                                                http://x2.c.lencr.org/
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                350 B
                                                                                                                                                                                                                                                                                                                1.4kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://x2.c.lencr.org/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 104.110.191.177:80
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                472 B
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 104.110.191.177:80
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                472 B
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 104.110.191.177:80
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                472 B
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 104.110.191.185:80
                                                                                                                                                                                                                                                                                                                http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D
                                                                                                                                                                                                                                                                                                                http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                472 B
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                5
                                                                                                                                                                                                                                                                                                                4

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET http://e1.o.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBTvkAFw3ViPKmUeIVEf3NC7b1ErqwQUWvPtK%2Fw2wjd5uVIw6lRvz1XLLqwCEgNvKNPtnjkmkb5yr5AIUdZ9qw%3D%3D

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/TSSesg1tFKaaKcm_kA_WyN3zShQ.png
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.9kB
                                                                                                                                                                                                                                                                                                                28.5kB
                                                                                                                                                                                                                                                                                                                21
                                                                                                                                                                                                                                                                                                                31

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/frontend/granny/_/dVbWOMTTrHu8aMefot4W8x2fBFE.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/frontend/granny/_/5UwcKr0o1HVQQuIQoqleJrV6p1U.png

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/frontend/granny/_/wbPwCJSxp1hY-tA-UkZx7Jp9u4s.png

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/frontend/granny/_/TSSesg1tFKaaKcm_kA_WyN3zShQ.png

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/frontend/granny/_/ndOSw56DC6Z0Hz5I1Xd8wMycfDU.png
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                3.1kB
                                                                                                                                                                                                                                                                                                                43.4kB
                                                                                                                                                                                                                                                                                                                28
                                                                                                                                                                                                                                                                                                                41

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/jquery/1.8.3/jquery.min.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/frontend/granny/_/l0uANig460CbaEQQScUNXHkMilg.png

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/frontend/granny/_/1Gu0iX71epnw2o4593t2AV-FRJA.png

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/frontend/granny/_/ndOSw56DC6Z0Hz5I1Xd8wMycfDU.png

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                686 B
                                                                                                                                                                                                                                                                                                                4.4kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/home/fonts/ys/1/text-medium.woff
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                5.6kB
                                                                                                                                                                                                                                                                                                                183.7kB
                                                                                                                                                                                                                                                                                                                78
                                                                                                                                                                                                                                                                                                                141

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/react/16.8.4/react-with-dom-and-polyfills.min.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/home/fonts/ys/1/text-light.woff

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/home/fonts/ys/1/text-medium.woff

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/home/fonts/ys/1/text-bold.woff
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.1kB
                                                                                                                                                                                                                                                                                                                128.6kB
                                                                                                                                                                                                                                                                                                                57
                                                                                                                                                                                                                                                                                                                103

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/home/fonts/ys/1/text-regular.woff

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/home/fonts/ys/1/text-bold.woff

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 87.250.250.145:443
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                696 B
                                                                                                                                                                                                                                                                                                                3.7kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 87.250.250.145:443
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                696 B
                                                                                                                                                                                                                                                                                                                3.7kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                608 B
                                                                                                                                                                                                                                                                                                                4.4kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/click
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.7kB
                                                                                                                                                                                                                                                                                                                12.9kB
                                                                                                                                                                                                                                                                                                                14
                                                                                                                                                                                                                                                                                                                17

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/search/?text=you+are+hacked+by+ach+vzlom

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/showcaptcha?retpath=aHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85&t=2/1657835226/46242329b47b2fcee25c7ced2c012037&u=8deb2576-ca5ccbf0-30ff3021-9b3311ce&s=44cfd836e07f7ab398c5224fa17cf44a

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                POST https://yandex.ru/clck/click

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                400
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                643 B
                                                                                                                                                                                                                                                                                                                4.1kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.8kB
                                                                                                                                                                                                                                                                                                                13.6kB
                                                                                                                                                                                                                                                                                                                13
                                                                                                                                                                                                                                                                                                                19

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/lego/_/pDu9OWAQKB0s2J9IojKpiS_Eho.ico

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                680 B
                                                                                                                                                                                                                                                                                                                5.2kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/generate_204
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                5.8kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                9

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/generate_204

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                204
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                5.5kB
                                                                                                                                                                                                                                                                                                                227.2kB
                                                                                                                                                                                                                                                                                                                102
                                                                                                                                                                                                                                                                                                                179

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                658 B
                                                                                                                                                                                                                                                                                                                4.6kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                              • 87.250.250.145:443
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                734 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                5.7kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/islands-icons/_/aKnllxm-gQhidpzbZqub7qe641g.ico
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                11.8kB
                                                                                                                                                                                                                                                                                                                13
                                                                                                                                                                                                                                                                                                                18

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/islands-icons/_/aKnllxm-gQhidpzbZqub7qe641g.ico

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.21.36:443
                                                                                                                                                                                                                                                                                                                https://favicon.yandex.net/favicon/www.secbot.org/joomlaforum.ru/otvet.mail.ru/qna.habr.com/GamesQa.ru/bestsoft.club/www.youtube.com/rxnblog.ru/xn--80adpqfl4azf.me/www.androeed.ru/hackrobloxaccount.com/FlareLand.ru/chity-majnkraft.ru/telemetr.me/RuCore.net
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.4kB
                                                                                                                                                                                                                                                                                                                12.4kB
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                                17

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://favicon.yandex.net/favicon/www.secbot.org/joomlaforum.ru/otvet.mail.ru/qna.habr.com/GamesQa.ru/bestsoft.club/www.youtube.com/rxnblog.ru/xn--80adpqfl4azf.me/www.androeed.ru/hackrobloxaccount.com/FlareLand.ru/chity-majnkraft.ru/telemetr.me/RuCore.net

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 213.180.204.91:443
                                                                                                                                                                                                                                                                                                                yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                659 B
                                                                                                                                                                                                                                                                                                                4.1kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 77.88.21.36:443
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                663 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 213.180.204.91:443
                                                                                                                                                                                                                                                                                                                https://yabs.yandex.ru/resource/spacer.gif
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                5.1kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yabs.yandex.ru/resource/spacer.gif

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                657 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                7.1kB
                                                                                                                                                                                                                                                                                                                73.9kB
                                                                                                                                                                                                                                                                                                                41
                                                                                                                                                                                                                                                                                                                64

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/watch.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dyou%2Bare%2Bhacked%2Bby%2Bach%2Bvzlom&page-ref=&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A2xjocdbdc4nvpvqabr08%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A846909710%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A19192143%3Arqn%3A2%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421936%3Ads%3A0%2C0%2C0%2C133%2C0%2C0%2C%2C5980%2C200%2C%2C%2C%2C6113%3Aco%3A0%3Ast%3A1657842439&t=clc(0-0-0)re(1)aw(1)rqnt(1)ti(2)

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dyou%2Bare%2Bhacked%2Bby%2Bach%2Bvzlom&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A2xjocdbdc4nvpvqabr08%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A846909710%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A19192143%3Arqn%3A2%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421936%3Ads%3A0%2C0%2C0%2C133%2C0%2C0%2C%2C5980%2C200%2C%2C%2C%2C6113%3Aco%3A0%3Ast%3A1657842439&t=clc%280-0-0%29re%281%29aw%281%29rqnt%281%29ti%282%29

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/advert.gif

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 93.158.134.158:443
                                                                                                                                                                                                                                                                                                                captcha-backgrounds.s3.yandex.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                712 B
                                                                                                                                                                                                                                                                                                                5.1kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                              • 93.158.134.158:443
                                                                                                                                                                                                                                                                                                                https://captcha-backgrounds.s3.yandex.net/static/default-background.jpg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                9.9kB
                                                                                                                                                                                                                                                                                                                356.9kB
                                                                                                                                                                                                                                                                                                                166
                                                                                                                                                                                                                                                                                                                265

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://captcha-backgrounds.s3.yandex.net/static/default-background.jpg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 188.114.96.0:443
                                                                                                                                                                                                                                                                                                                https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                6.9kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.meme-arsenal.com/memes/da2f1ad351b86210222d977d86acd913.jpg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 188.114.96.0:443
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                671 B
                                                                                                                                                                                                                                                                                                                5.1kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                10.2kB
                                                                                                                                                                                                                                                                                                                92.6kB
                                                                                                                                                                                                                                                                                                                49
                                                                                                                                                                                                                                                                                                                79

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/tag.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/watch/3?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fshowcaptcha%3Fcc%3D1%26retpath%3DaHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85%26t%3D2%2F1657835218%2F934f67e84ee009d482a39f4ed78b7f2f%26u%3D632f4534-ce07bbd5-ce31fe89-c5bd420a%26s%3D5798e0049e71ee313dcf5eabefb17de7&page-ref=&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A1hc9dnhfark4nldxqmebc%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A70440030%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A484910238%3Arqn%3A1%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421468%3Ads%3A0%2C0%2C0%2C0%2C487%2C487%2C1%2C9644%2C0%2C%2C%2C%2C10131%3Awv%3A2%3Aco%3A0%3Ast%3A1657842434&t=clc(0-0-0)aw(1)rqnt(1)ti(2)

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/watch/3/1?wmode=7&page-url=https%3A%2F%2Fyandex.ru%2Fshowcaptcha%3Fcc%3D1%26retpath%3DaHR0cHM6Ly95YW5kZXgucnUvc2VhcmNoP3RleHQ9eW91K2FyZStoYWNrZWQrYnkrYWNoK3Z6bG9t_329e4ce7c82bb1b828f6c7134de67c85%26t%3D2%2F1657835218%2F934f67e84ee009d482a39f4ed78b7f2f%26u%3D632f4534-ce07bbd5-ce31fe89-c5bd420a%26s%3D5798e0049e71ee313dcf5eabefb17de7&page-ref&charset=utf-8&ut=noindex&browser-info=pv%3A1%3Agdpr%3A%3Avf%3A1hc9dnhfark4nldxqmebc%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A840%3Acn%3A1%3Adp%3A0%3Als%3A1043239617084%3Ahid%3A70440030%3Az%3A0%3Ai%3A20220714234713%3Aet%3A1657842433%3Ac%3A1%3Arn%3A484910238%3Arqn%3A1%3Au%3A1657842433168537128%3Aw%3A1263x626%3As%3A1280x720x24%3Ask%3A1%3Aj%3A1%3Aeu%3A1%3Ans%3A1657842421468%3Ads%3A0%2C0%2C0%2C0%2C487%2C487%2C1%2C9644%2C0%2C%2C%2C%2C10131%3Awv%3A2%3Aco%3A0%3Ast%3A1657842434&t=clc%280-0-0%29aw%281%29rqnt%281%29ti%282%29

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/advert.gif

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                611 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                726 B
                                                                                                                                                                                                                                                                                                                5.2kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/generate_204
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                5.8kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                10

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/generate_204

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                204
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.3kB
                                                                                                                                                                                                                                                                                                                226.1kB
                                                                                                                                                                                                                                                                                                                74
                                                                                                                                                                                                                                                                                                                180

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                664 B
                                                                                                                                                                                                                                                                                                                4.7kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=2616.85.1928,143.2129=1657842421936,207=15974.169/*
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.9kB
                                                                                                                                                                                                                                                                                                                5.7kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                11

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/clck/safeclick/data=AiuY0DBWFJ5Hyx_fyvalFGsENFjk7TbZQxH4sZLaTgde0UgXA8Bs72HOyoU7X8IuzvN5QmpauQpW-cLnPCT8PZwuPlrgwWOCSbUMiuaHjQATpBP3c9yYrygyyLUEe3WD-jiNXgqbtCm16JIP-4Qza4tR0YmK5DjBA30NwJwfWTHsz2q9QlVhA6_QN7xpnBJ-2ITrz_ID3NbYWcK8nXbKhQu0bagKfjM3rIml0scUNtEprmk2L_9t80H6xbkXY3gRcJnoVUJ_EOPrrr_l4NuWuA66GixPZLljIpF25xe8QHVcYRZdz-XyJ3ms5XjNuVTzdErDR2dKtNxuIILlAVZg3xLhm9YRFnKvxDOF-hyLgt7cV6FX9FjkRpfcoEwn0C4Tm7Rct6rrGxHcfQlCyrCZ-jIvZbwwW3iRz1oBgUvN1RK-6zZpQkn0TbKUbWkD0300vbRnyaMdfJgAOuaaezV_rmMTXVxaSKeePYpZcbU98DOdoykgoPtI_cg_Sg5vW8bY780bvLHb1WAz4KAw0oy-aSDQQnwd77vYrR268GQRN5W6ZZ_QsSARBoAGB6gBNlE3EbLXrJjYDT5rTvKJRp-XczUMemXSrWwYmYsoudzx6nu6U5SB_wzRdka49Uy6Bnr579RR6_iet9NCUU8zImNEyoxNbJG_IucoKKCq0b86DZoO73hb8hsg4kddL5BDpElWBTqkLdK4arOD5NQbrUv3uTA0GbfVvfvE2E2v6tacl7gexTpXUNRVcOlZwcCRcTxEMgQgVs_9En1a-BME0lDhxRUIoXyJB4p9Zhh0vBLh78FBt-vbaCdUzVu_QsuzLdCqryDcT2VSwnnZ0Rf1_oMf9S_g_yVjFhJSKwXJ_Obz_VB0MUkUeabit2ig0X7knvvaVVphRvYyYz2i6NOQcHuBX32yWTzD_YslMHW2Mjjer6_s-LGQN7XMsi-Jb_6Hw4x-R00f5by3Z1HEqKKDnJYoY6fUSbrO7HQ1YxZHxQrcI4ZnT4-oUNetHbNGH_yY-JLqeDc9rLmNjHlq6qHhCNyIia6NVFQQDzDjeRvHURuQ4Ik,/sign=e290e1dcc00a6d4e90e1a6cf06ef47c3/keyno=0/path=690.2096.207/vars=143=28.2543.153,287=10426,1484=1,2437=2771,1701=2616.85.1928,143.2129=1657842421936,207=15974.169/*

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                636 B
                                                                                                                                                                                                                                                                                                                4.4kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                636 B
                                                                                                                                                                                                                                                                                                                4.4kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                3.0kB
                                                                                                                                                                                                                                                                                                                69.0kB
                                                                                                                                                                                                                                                                                                                27
                                                                                                                                                                                                                                                                                                                57

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.4kB
                                                                                                                                                                                                                                                                                                                136.7kB
                                                                                                                                                                                                                                                                                                                38
                                                                                                                                                                                                                                                                                                                106

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/generate_204

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                204

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.0kB
                                                                                                                                                                                                                                                                                                                57.2kB
                                                                                                                                                                                                                                                                                                                37
                                                                                                                                                                                                                                                                                                                49

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/watch.js

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                611 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 77.88.21.36:443
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                663 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 77.88.21.36:443
                                                                                                                                                                                                                                                                                                                https://favicon.yandex.net/favicon/www.secbot.org/joomlaforum.ru/qna.habr.com/bestsoft.club/GamesQa.ru/steamcommunity.com/otvet.mail.ru/xn--80adpqfl4azf.me/t.me/wdfiles.ru/www.youtube.com/vzlomvk.social/FlareLand.ru/rxnblog.ru/hackrobloxaccount.com
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.4kB
                                                                                                                                                                                                                                                                                                                13.1kB
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                                17

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://favicon.yandex.net/favicon/www.secbot.org/joomlaforum.ru/qna.habr.com/bestsoft.club/GamesQa.ru/steamcommunity.com/otvet.mail.ru/xn--80adpqfl4azf.me/t.me/wdfiles.ru/www.youtube.com/vzlomvk.social/FlareLand.ru/rxnblog.ru/hackrobloxaccount.com

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.8kB
                                                                                                                                                                                                                                                                                                                100.8kB
                                                                                                                                                                                                                                                                                                                34
                                                                                                                                                                                                                                                                                                                84

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/generate_204

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                204

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                3.0kB
                                                                                                                                                                                                                                                                                                                77.0kB
                                                                                                                                                                                                                                                                                                                25
                                                                                                                                                                                                                                                                                                                65

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 87.250.250.145:443
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                702 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 87.250.250.145:443
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                702 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                672 B
                                                                                                                                                                                                                                                                                                                4.9kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                8.0kB
                                                                                                                                                                                                                                                                                                                14
                                                                                                                                                                                                                                                                                                                15

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                614 B
                                                                                                                                                                                                                                                                                                                4.7kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.5kB
                                                                                                                                                                                                                                                                                                                224.4kB
                                                                                                                                                                                                                                                                                                                77
                                                                                                                                                                                                                                                                                                                173

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                682 B
                                                                                                                                                                                                                                                                                                                4.4kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                682 B
                                                                                                                                                                                                                                                                                                                4.4kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                614 B
                                                                                                                                                                                                                                                                                                                4.7kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                3.6kB
                                                                                                                                                                                                                                                                                                                221.9kB
                                                                                                                                                                                                                                                                                                                59
                                                                                                                                                                                                                                                                                                                172

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                580 B
                                                                                                                                                                                                                                                                                                                4.9kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.5kB
                                                                                                                                                                                                                                                                                                                8.0kB
                                                                                                                                                                                                                                                                                                                12
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 87.250.250.145:443
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                780 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.5kB
                                                                                                                                                                                                                                                                                                                8.0kB
                                                                                                                                                                                                                                                                                                                12
                                                                                                                                                                                                                                                                                                                14

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                580 B
                                                                                                                                                                                                                                                                                                                4.9kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                580 B
                                                                                                                                                                                                                                                                                                                4.9kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.5kB
                                                                                                                                                                                                                                                                                                                6.9kB
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                3.1kB
                                                                                                                                                                                                                                                                                                                81.9kB
                                                                                                                                                                                                                                                                                                                29
                                                                                                                                                                                                                                                                                                                65

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                4.7kB
                                                                                                                                                                                                                                                                                                                95.2kB
                                                                                                                                                                                                                                                                                                                32
                                                                                                                                                                                                                                                                                                                80

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/generate_204

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                204

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                611 B
                                                                                                                                                                                                                                                                                                                3.8kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 87.250.250.119:443
                                                                                                                                                                                                                                                                                                                https://mc.yandex.ru/metrika/advert.gif
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                3.7kB
                                                                                                                                                                                                                                                                                                                89.4kB
                                                                                                                                                                                                                                                                                                                24
                                                                                                                                                                                                                                                                                                                77

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/tag.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://mc.yandex.ru/metrika/advert.gif

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                5.6kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                611 B
                                                                                                                                                                                                                                                                                                                4.1kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                https://youtube.com/
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                9.2kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                301
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                564 B
                                                                                                                                                                                                                                                                                                                7.1kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                610 B
                                                                                                                                                                                                                                                                                                                7.1kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                10.5kB
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                                14

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                301
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                572 B
                                                                                                                                                                                                                                                                                                                4.7kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.251.36.45:443
                                                                                                                                                                                                                                                                                                                https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.7kB
                                                                                                                                                                                                                                                                                                                161.1kB
                                                                                                                                                                                                                                                                                                                38
                                                                                                                                                                                                                                                                                                                128

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://accounts.google.com/ServiceLogin?service=youtube&uilel=3&passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.5kB
                                                                                                                                                                                                                                                                                                                10.4kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                301
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                564 B
                                                                                                                                                                                                                                                                                                                7.1kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.3kB
                                                                                                                                                                                                                                                                                                                4.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                11

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yastatic.net/s3/gdpr/popup/v2/en_inversed_buttons.js

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                565 B
                                                                                                                                                                                                                                                                                                                4.0kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                668 B
                                                                                                                                                                                                                                                                                                                7.1kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.5kB
                                                                                                                                                                                                                                                                                                                10.4kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                301
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.4kB
                                                                                                                                                                                                                                                                                                                6.9kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                11

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.162:443
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                580 B
                                                                                                                                                                                                                                                                                                                4.9kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                564 B
                                                                                                                                                                                                                                                                                                                7.1kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.250.179.142:443
                                                                                                                                                                                                                                                                                                                https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.6kB
                                                                                                                                                                                                                                                                                                                11.5kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                14

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                302

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://youtube.com/supported_browsers?next_url=https%3A%2F%2Fyoutube.com%2F

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                301
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                https://yandex.ru/images/search?text=trollface
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.5kB
                                                                                                                                                                                                                                                                                                                7.9kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yandex.ru/images/search?text=trollface

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                604 B
                                                                                                                                                                                                                                                                                                                4.3kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                              • 204.79.197.200:443
                                                                                                                                                                                                                                                                                                                ieonline.microsoft.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                iexplore.exe
                                                                                                                                                                                                                                                                                                                615 B
                                                                                                                                                                                                                                                                                                                7.6kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.0kB
                                                                                                                                                                                                                                                                                                                9.6kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                12.0kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                14

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.3kB
                                                                                                                                                                                                                                                                                                                25.6kB
                                                                                                                                                                                                                                                                                                                12
                                                                                                                                                                                                                                                                                                                24

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                16.4kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                17

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                12.0kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                14

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                17.1kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                18

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                25.6kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                24

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.0kB
                                                                                                                                                                                                                                                                                                                9.6kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.2kB
                                                                                                                                                                                                                                                                                                                11.4kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                16

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                304
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                12.0kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                14

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                12.4kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                566 B
                                                                                                                                                                                                                                                                                                                8.2kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                566 B
                                                                                                                                                                                                                                                                                                                8.2kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                12.5kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                14

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                443 B
                                                                                                                                                                                                                                                                                                                335 B
                                                                                                                                                                                                                                                                                                                4
                                                                                                                                                                                                                                                                                                                4
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.0kB
                                                                                                                                                                                                                                                                                                                11.2kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                658 B
                                                                                                                                                                                                                                                                                                                8.2kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                12.4kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                13

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.3kB
                                                                                                                                                                                                                                                                                                                65.6kB
                                                                                                                                                                                                                                                                                                                22
                                                                                                                                                                                                                                                                                                                53

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/EJ30UiviFHA/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLDBP77mke4cOxzYinbEJ_KltGOpMw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/xDl9RSXqy1c/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCB7sW0BlMjwFVIHqGwNFUn9A9DLg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                9.6kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                12

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/kSHteDUl90I/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBLvniqY1SL4p5IZG2TDF9A2ao_Iw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                3.2kB
                                                                                                                                                                                                                                                                                                                127.9kB
                                                                                                                                                                                                                                                                                                                31
                                                                                                                                                                                                                                                                                                                99

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/J4J3Vt50Fso/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLCCMxCqa7HlEpjmA8BF9zhWIJUU2w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/hS8gLn69nTs/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLAhMhk2On5KpoEP4mFMSAkoEGDPcQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/nAT269r3uAw/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAAQxph59bt58jlCKxXIM3YltwSAg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.9kB
                                                                                                                                                                                                                                                                                                                32.0kB
                                                                                                                                                                                                                                                                                                                15
                                                                                                                                                                                                                                                                                                                28

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/Fx9VzfTx-sc/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBkr7tsojEvmRDmBsC8-TzpBk-jpQ

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/qScDShPjTvY/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLBHLl78HphiCnXzXFuY_ld0orWN9w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.8kB
                                                                                                                                                                                                                                                                                                                28.1kB
                                                                                                                                                                                                                                                                                                                13
                                                                                                                                                                                                                                                                                                                26

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/jaaNE0OBBL4/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLAoh0PyrMayNViQ_TwnaxiElABOYw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/6vD4ZP4dGjM/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLD0MpD-GLC1Jy5h8e841ngo2Ke_Fw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.250.179.182:443
                                                                                                                                                                                                                                                                                                                https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                2.2kB
                                                                                                                                                                                                                                                                                                                51.0kB
                                                                                                                                                                                                                                                                                                                21
                                                                                                                                                                                                                                                                                                                42

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/PfIhl5JJDu8/hq720_2.jpg?sqp=-oaymwEkCJYDENAFSFryq4qpAxYIARUAAAAAJQAAyEI9AICiQ3gB0AEB&rs=AOn4CLBjs7MT6_21a1mmlCOcNEgJgygR4Q

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://i.ytimg.com/vi/C3pBNJsDf5U/hqdefault.jpg?sqp=-oaymwEjCPYBEIoBSFryq4qpAxUIARUAAAAAGAElAADIQj0AgKJDeAE=&rs=AOn4CLC8yo7wF3GQTreU3c4MP2X_3fCpPw

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                12.6kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                15

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://yt3.ggpht.com/PspzqK7fVXoo6nstAt_X0dhYxI1k5vF78pZaW9o3xmry6bWnYRiWWf76fHde6kI-Ab41FBvWDA=s88-c-k-c0x00ffffff-no-rj

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.1:443
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                612 B
                                                                                                                                                                                                                                                                                                                8.2kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                664 B
                                                                                                                                                                                                                                                                                                                5.0kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                https://www.google.nl/pagead/lvz?evtid=ADKXDuaeXTNqznkGuC15k-MJVNgxqEpmxktPHQ8oKY7STg2ADfgDwMDZWp0lYzS2pAOLuch4QLTtKKWjH5cDFadf_slQM3Cwhw&req_ts=1657835219&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdP83xERfoCRXgNtQlJFXj2K3vih0A
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.3kB
                                                                                                                                                                                                                                                                                                                6.4kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                11

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.google.nl/pagead/lvz?evtid=ADKXDuaeXTNqznkGuC15k-MJVNgxqEpmxktPHQ8oKY7STg2ADfgDwMDZWp0lYzS2pAOLuch4QLTtKKWjH5cDFadf_slQM3Cwhw&req_ts=1657835219&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdP83xERfoCRXgNtQlJFXj2K3vih0A

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                664 B
                                                                                                                                                                                                                                                                                                                5.0kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                https://www.google.nl/pagead/lvz?evtid=ADKXDubSsJtpG_-gZ1ffF-T4orlZf7RvQBy4NCE3Sh-xYXP7I2yjYGQ1TmGSHzt4H2j_etrMj8eC8DAgKz4kcun4Yit44Y1Upw&req_ts=1657835216&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdNpMAUmTNw-5YpvrBwwnBXlt8wmRg
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                6.3kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                11

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.google.nl/pagead/lvz?evtid=ADKXDubSsJtpG_-gZ1ffF-T4orlZf7RvQBy4NCE3Sh-xYXP7I2yjYGQ1TmGSHzt4H2j_etrMj8eC8DAgKz4kcun4Yit44Y1Upw&req_ts=1657835216&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdNpMAUmTNw-5YpvrBwwnBXlt8wmRg

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                152 B
                                                                                                                                                                                                                                                                                                                3
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                https://www.google.nl/pagead/lvz?evtid=ADKXDua4wiCc0efA2IAXUGXz3A1SlQvZJ_2eAhKE6qYeoONjoStQOPwvMyO4N5x6y_5NS_q0IOulb2BjJwXUfavRb4-hNCtwyg&req_ts=1657835231&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdMkfBwX4MxGXU0cGc2nCD6sdzLk2w
                                                                                                                                                                                                                                                                                                                tls, http
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                6.3kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                10

                                                                                                                                                                                                                                                                                                                HTTP Request

                                                                                                                                                                                                                                                                                                                GET https://www.google.nl/pagead/lvz?evtid=ADKXDua4wiCc0efA2IAXUGXz3A1SlQvZJ_2eAhKE6qYeoONjoStQOPwvMyO4N5x6y_5NS_q0IOulb2BjJwXUfavRb4-hNCtwyg&req_ts=1657835231&pg=MainAppBootstrap%3AChannels&az=1&sigh=AN1MEdMkfBwX4MxGXU0cGc2nCD6sdzLk2w

                                                                                                                                                                                                                                                                                                                HTTP Response

                                                                                                                                                                                                                                                                                                                200
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.2kB
                                                                                                                                                                                                                                                                                                                6.1kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 142.251.36.3:443
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                612 B
                                                                                                                                                                                                                                                                                                                4.7kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.5kB
                                                                                                                                                                                                                                                                                                                7.2kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                11
                                                                                                                                                                                                                                                                                                              • 77.88.55.70:443
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                556 B
                                                                                                                                                                                                                                                                                                                4.3kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                13.7kB
                                                                                                                                                                                                                                                                                                                9
                                                                                                                                                                                                                                                                                                                17
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                23.0kB
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                                24
                                                                                                                                                                                                                                                                                                              • 178.154.131.216:443
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.7kB
                                                                                                                                                                                                                                                                                                                42.8kB
                                                                                                                                                                                                                                                                                                                17
                                                                                                                                                                                                                                                                                                                40
                                                                                                                                                                                                                                                                                                              • 93.158.134.158:443
                                                                                                                                                                                                                                                                                                                serp-static-testing.s3.yandex.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.1kB
                                                                                                                                                                                                                                                                                                                10.4kB
                                                                                                                                                                                                                                                                                                                7
                                                                                                                                                                                                                                                                                                                14
                                                                                                                                                                                                                                                                                                              • 93.158.134.158:443
                                                                                                                                                                                                                                                                                                                serp-static-testing.s3.yandex.net
                                                                                                                                                                                                                                                                                                                104 B
                                                                                                                                                                                                                                                                                                                2
                                                                                                                                                                                                                                                                                                              • 142.251.39.106:443
                                                                                                                                                                                                                                                                                                                jnn-pa.googleapis.com
                                                                                                                                                                                                                                                                                                                52 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                              • 142.251.36.38:443
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                52 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                              • 142.251.36.38:443
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.0kB
                                                                                                                                                                                                                                                                                                                6.8kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.39.106:443
                                                                                                                                                                                                                                                                                                                jnn-pa.googleapis.com
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                1.3kB
                                                                                                                                                                                                                                                                                                                7.2kB
                                                                                                                                                                                                                                                                                                                8
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.38:443
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                tls
                                                                                                                                                                                                                                                                                                                933 B
                                                                                                                                                                                                                                                                                                                7.7kB
                                                                                                                                                                                                                                                                                                                6
                                                                                                                                                                                                                                                                                                                10
                                                                                                                                                                                                                                                                                                              • 142.251.36.38:443
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                52 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                yandex.ru
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                iexplore.exe
                                                                                                                                                                                                                                                                                                                55 B
                                                                                                                                                                                                                                                                                                                119 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                yandex.ru

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                77.88.55.70
                                                                                                                                                                                                                                                                                                                5.255.255.55
                                                                                                                                                                                                                                                                                                                5.255.255.50
                                                                                                                                                                                                                                                                                                                77.88.55.66

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                66 B
                                                                                                                                                                                                                                                                                                                98 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                www.meme-arsenal.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                188.114.96.0
                                                                                                                                                                                                                                                                                                                188.114.97.0

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                4.tcp.eu.ngrok.io
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                jopa.exe
                                                                                                                                                                                                                                                                                                                63 B
                                                                                                                                                                                                                                                                                                                79 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                4.tcp.eu.ngrok.io

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                18.198.77.177

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                64 B
                                                                                                                                                                                                                                                                                                                165 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                apps.identrust.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                104.110.191.201
                                                                                                                                                                                                                                                                                                                104.110.191.182

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                apps.identrust.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                64 B
                                                                                                                                                                                                                                                                                                                165 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                apps.identrust.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                104.110.191.182
                                                                                                                                                                                                                                                                                                                104.110.191.201

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                60 B
                                                                                                                                                                                                                                                                                                                165 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                x2.c.lencr.org

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                23.2.164.159

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                x2.c.lencr.org
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                60 B
                                                                                                                                                                                                                                                                                                                165 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                x2.c.lencr.org

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                23.2.164.159

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                60 B
                                                                                                                                                                                                                                                                                                                159 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                e1.o.lencr.org

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                104.110.191.185
                                                                                                                                                                                                                                                                                                                104.110.191.177

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                60 B
                                                                                                                                                                                                                                                                                                                159 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                e1.o.lencr.org

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                104.110.191.177
                                                                                                                                                                                                                                                                                                                104.110.191.185

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                60 B
                                                                                                                                                                                                                                                                                                                159 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                e1.o.lencr.org

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                104.110.191.177
                                                                                                                                                                                                                                                                                                                104.110.191.185

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                e1.o.lencr.org
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                60 B
                                                                                                                                                                                                                                                                                                                159 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                e1.o.lencr.org

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                104.110.191.177
                                                                                                                                                                                                                                                                                                                104.110.191.185

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                yastatic.net
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                58 B
                                                                                                                                                                                                                                                                                                                106 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                yastatic.net

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                178.154.131.216
                                                                                                                                                                                                                                                                                                                178.154.131.217
                                                                                                                                                                                                                                                                                                                178.154.131.215

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                63 B
                                                                                                                                                                                                                                                                                                                79 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                adfstat.yandex.ru

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                87.250.250.145

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                i.ytimg.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                57 B
                                                                                                                                                                                                                                                                                                                217 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                i.ytimg.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.250.179.182
                                                                                                                                                                                                                                                                                                                142.250.179.214
                                                                                                                                                                                                                                                                                                                142.251.36.22
                                                                                                                                                                                                                                                                                                                142.251.39.118
                                                                                                                                                                                                                                                                                                                172.217.168.214
                                                                                                                                                                                                                                                                                                                216.58.208.118
                                                                                                                                                                                                                                                                                                                216.58.214.22
                                                                                                                                                                                                                                                                                                                142.250.179.150
                                                                                                                                                                                                                                                                                                                142.251.36.54
                                                                                                                                                                                                                                                                                                                172.217.168.246

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                accounts.google.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                65 B
                                                                                                                                                                                                                                                                                                                81 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                accounts.google.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.251.36.45

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                favicon.yandex.net
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                64 B
                                                                                                                                                                                                                                                                                                                128 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                favicon.yandex.net

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                77.88.21.36
                                                                                                                                                                                                                                                                                                                87.250.250.36
                                                                                                                                                                                                                                                                                                                93.158.134.36
                                                                                                                                                                                                                                                                                                                213.180.204.36

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                yabs.yandex.ru
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                60 B
                                                                                                                                                                                                                                                                                                                108 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                yabs.yandex.ru

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                213.180.204.91
                                                                                                                                                                                                                                                                                                                87.250.250.91
                                                                                                                                                                                                                                                                                                                93.158.134.91

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                mc.yandex.ru
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                58 B
                                                                                                                                                                                                                                                                                                                122 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                mc.yandex.ru

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                87.250.250.119
                                                                                                                                                                                                                                                                                                                87.250.251.119
                                                                                                                                                                                                                                                                                                                93.158.134.119
                                                                                                                                                                                                                                                                                                                77.88.21.119

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                captcha-backgrounds.s3.yandex.net
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                79 B
                                                                                                                                                                                                                                                                                                                109 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                captcha-backgrounds.s3.yandex.net

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                93.158.134.158

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                73 B
                                                                                                                                                                                                                                                                                                                89 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                googleads.g.doubleclick.net

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.250.179.162

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                www.microsoft.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                63 B
                                                                                                                                                                                                                                                                                                                230 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                www.microsoft.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                104.123.41.162

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                youtube.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                57 B
                                                                                                                                                                                                                                                                                                                73 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                youtube.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.250.179.142

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                59 B
                                                                                                                                                                                                                                                                                                                120 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                yt3.ggpht.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.251.36.1

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                yt3.ggpht.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                59 B
                                                                                                                                                                                                                                                                                                                120 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                yt3.ggpht.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.251.36.1

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                www.google.nl
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                IEXPLORE.EXE
                                                                                                                                                                                                                                                                                                                59 B
                                                                                                                                                                                                                                                                                                                75 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                www.google.nl

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.251.36.3

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                serp-static-testing.s3.yandex.net
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                79 B
                                                                                                                                                                                                                                                                                                                109 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                serp-static-testing.s3.yandex.net

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                93.158.134.158

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                jnn-pa.googleapis.com
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                67 B
                                                                                                                                                                                                                                                                                                                83 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                jnn-pa.googleapis.com

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.251.39.106

                                                                                                                                                                                                                                                                                                              • 8.8.8.8:53
                                                                                                                                                                                                                                                                                                                static.doubleclick.net
                                                                                                                                                                                                                                                                                                                dns
                                                                                                                                                                                                                                                                                                                68 B
                                                                                                                                                                                                                                                                                                                133 B
                                                                                                                                                                                                                                                                                                                1
                                                                                                                                                                                                                                                                                                                1

                                                                                                                                                                                                                                                                                                                DNS Request

                                                                                                                                                                                                                                                                                                                static.doubleclick.net

                                                                                                                                                                                                                                                                                                                DNS Response

                                                                                                                                                                                                                                                                                                                142.251.36.38

                                                                                                                                                                                                                                                                                                              MITRE ATT&CK Enterprise v6

                                                                                                                                                                                                                                                                                                              Replay Monitor

                                                                                                                                                                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                                                                                                                                                                              Downloads

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\1.vbs

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                45B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                7a89fc4808a599eca068d9d5d6da5c17

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                34808a073a897f4eb2deaea3e74b8f33a3872776

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7d855d79426eca3e1fc8f6338c64a93bb90ecb51247f810c6e4414cbacbf5953

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                dc6fa4265890133d4d003feafa7f6583cbcb7e1e9140babec14b65ebc704327abe4a4fb851e053b4bc889c1e12c8867dd6e1b26a78810bb7ed412aaa34b0b80e

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\10.png

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                1KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                6252ab296efbc5619e986edde17a0f03

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                9053c8a95d1c973fc060542f30125fc639fa06fd

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                49bf053c4bd9190b2c2a2d44e6ba72202ade23c5ab99c9b988599c96c1cc79d8

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                60e10ceff71cca42b31583d753cc5d4bc0024013eeb3ccae6823792258f168255b3d4300791ce05a8328c989b8d33dbcb643cc102360cc61076dea5ee31c4289

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\11.vbs

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                107B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                1b57e67e22f90b8a31e757997940f875

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                7a67253b2b108070b8061855a9fb6d7ef1f4ffb5

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                d8328176599c5cf00c14e893887b2abde72f01ee64c32985b26544558c337cf4

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                cadb94ca168a455d365a390e7492a1865d2d54e3501f2924a81d69ab6cd6e539e51a2b79f23a38bd4cd97b83d2e76a8e3e344ba044a9fe9a5930b74047da3723

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\12.bat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                64B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                2fd614792ac60cc2a70eb01b6f9b67f4

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                9296d5aabe979e5e4f72017e3012789adfaa1676

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                82475a224341b16d4911d7e98e91ff3414c9913ba3c058bfd878f376e32b4ebc

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                30f19b7504a2176882dfa7ba54cf851a0ed2c91b2ab07a9d5804f64f7177d3ff3e4e832cc7865ac14554d4ba6e09b732eef5a1443d960fc0d448a647ff2429e5

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\2.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                2.3MB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                5134f289dbf4abae370e3f36b637b73e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                c78d3f2d00dc47da0112a74df665c7a84a8e32c3

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e69c9383b5d9fe4e069ddee15797c52e9116f883ad3b1717d2519621ab2751b2

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                0bf61a04b93b1ba5b8a0e2d9a1c333cc4605350a4c797cc9f5f78fec698d6f4fd62d329513ed406e76a06aa6af0f00d206da723e5a33315ce8de7f68f2002cb5

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\3.bat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                62B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                ea0164899b0262ea4949e2bcd9f31396

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                91b698e4b13755fcb6d5ce0209a5b342185bc566

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                0c39352ff971f6099cdf146ce566b70e089eb15db75a42b3ae8deb13fa771913

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                cf9ba9b662dc107593cc66fe21b815bbf5b05651c0e4a50029f62ff16d64f8d63185d57c96cd6984141ca62310250b7af42ef56ea6249285c97c2d0aec0f3560

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\4.bat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                83B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                1acc850c1f9ad9dee5c12c9bd511bc19

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2786d0b2a6f3b1518f0ffcc31fd4d2466448f3dc

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                136ca30e5e046d8cc399c5ae80fee4678723dabb84e0b33211c23e4457ab24d8

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                db3eef765e8de29df99fda976d7ede5ec713a090f810a4a48430e2b1d11f54656a46c46e9cc691fa645212ecc742447f13d8429bcd32de318e5df460c74eb81d

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\5.png

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                39KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                2a801dbd22a79636b9f34635c79ccb8f

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                5a40990c64ced4330cf06af7b2e2a4a8ccdd3cba

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                96487209d8bd5d5c8b92b2cef8d8ac27211a422717c2e819e68a3eec5b324ff3

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                bee135856c35c4b1b70e4c56280d7932f264bf887d3860cfc6cd7ad7f46a8f5a43ca6318a0bfa67e4b08192e10a538e747df03c13b1d3aaad5bfb7239aa5c7ef

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\6.bat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                77B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                867b43ca89739d7c567234005c9d3094

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                aa62a7c35a590ea8a90e7f7cbceb0a9ae25b4ad7

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                c13a71d0d440c191560b068295ab93774969d6c81ee642a90462a1075cb25c89

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                679e44414ca8c1bab9254f090e74644ceed96db05e25142a502e73b759360a6cecc46106dec59a9fc78b27a025cac345180cb8fd8e381bd1bc73db4be6dc989c

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\7.bat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                17B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                0d8f7695e06c0431dcc84ce926ba5f1d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                a1504b4baf7c180be7b42cb745e5af7ccc272219

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                5ea8f2c0ed24467105b6eba30731f2e1fd5bb4f5cd9d17287f32b9ec850ea301

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                df6e9cc73414cfa1f53d117ef8e1847a0539d44db9488d763b2fb7b6b52fb4cba5e74e96c427fd3dd9ffd68eb9b6cf047ce2bbdf66220043db19e332e6ca9904

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\8.bat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                49B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                b949133f46ebeabf8c49c6c7f7f4cd68

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                04286a9c7641c5225c7e654904504fe4c7a0a39a

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                3c08b2e29d0c97716dfc52e29bb44648fa2e38e802dd1f590b94233b6546db58

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                0f1f4423bad62ed68f9b1a76e6ea0cb863a91f49036314c93e2586250edbc5ab2e48c48e568cacf825f6b7691d88856e98b39e3972a8ca582063b871de49da06

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\ach\9.bat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                37B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                4e8cfdf8fcc0df4d52c0240ff9714efa

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                ea56c4ff1bda995f2c0ffcf5473a55e441d3fcfe

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                f473c141cf7fed8fa0d543dbd07e9333dc0975b79ae5b55e73ae015c67e8b53a

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                d041322d20b2a3fe58be075120cefa06ec246e9496acdccbc907e678cf76286967d604812a214e290208c28369d57f8fe0d13fdcae4fd797c096e6d6d635df23

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\skleika\ach.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                837KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                ab4470038abfcf2550f50cb94537165e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2aaa0e7137e2c09ab7f0cc5bcaf088521edad9f0

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7c80903c5d1765f106a9a25187c32b40a9f7ab11ebf40d8117ba5b80acc5f3e9

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                b6853047083ccb5e4d0c13cad934366506dfb3decaefc9a06c26a255b1d0704b38047cafba2daa4cfb1bf09b3ef5ebe79153eee0ae8ea5cc8f534f280c50e7f4

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\skleika\ach.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                837KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                ab4470038abfcf2550f50cb94537165e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2aaa0e7137e2c09ab7f0cc5bcaf088521edad9f0

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7c80903c5d1765f106a9a25187c32b40a9f7ab11ebf40d8117ba5b80acc5f3e9

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                b6853047083ccb5e4d0c13cad934366506dfb3decaefc9a06c26a255b1d0704b38047cafba2daa4cfb1bf09b3ef5ebe79153eee0ae8ea5cc8f534f280c50e7f4

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\skleika\jopa.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                37KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                36e59be3c751683fc142c0ebd8d6a71d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                1e9632a2173588f606e6a354cdcbeddc91ab2c78

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                3611560138463ba5b2438d8691410a642875230b8db788751826a7b495371e4c

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e20d3f2c0ad628aa137c7dfde3d77ae09628f725af5f590dd4ff052a65975e7f0aa5fa5cbfb417ce57f0d34a36dccac3333885e2f91125946f8a29db27316eeb

                                                                                                                                                                                                                                                                                                              • C:\Program Files (x86)\skleika\jopa.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                37KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                36e59be3c751683fc142c0ebd8d6a71d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                1e9632a2173588f606e6a354cdcbeddc91ab2c78

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                3611560138463ba5b2438d8691410a642875230b8db788751826a7b495371e4c

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e20d3f2c0ad628aa137c7dfde3d77ae09628f725af5f590dd4ff052a65975e7f0aa5fa5cbfb417ce57f0d34a36dccac3333885e2f91125946f8a29db27316eeb

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                1KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                b1ab75955cb952e087ba5cffe9e74a1e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2a75c380eb45aebb1473748809d57aad153b1cb3

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                25e7fd2645292015b35bdbef005b9b0f97ae4f0d79686e51d94c64a5bdfd2e9d

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                c5c337a0f9492d87a515b510185e556787ff2de7b355f5776effe312d70c63c005bad615b246e5d7814bc1a7eb4b9e30e995dcef3c4bcb91d84537457c8a289c

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                1KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                b1ab75955cb952e087ba5cffe9e74a1e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2a75c380eb45aebb1473748809d57aad153b1cb3

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                25e7fd2645292015b35bdbef005b9b0f97ae4f0d79686e51d94c64a5bdfd2e9d

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                c5c337a0f9492d87a515b510185e556787ff2de7b355f5776effe312d70c63c005bad615b246e5d7814bc1a7eb4b9e30e995dcef3c4bcb91d84537457c8a289c

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                1KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                dbbd9b3fe51edc218ab98ab9bed84e24

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                6f3a7ddf8da569547c723e1c5f4fbf2fb91d8925

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                470ca119b20e0932b28391daf62a418841387ddc8e27afec6594c327624d21c6

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                56014491ed6930acc43e7cb9ef246a1b7abe7c0d043bf0c3e85e389a58cdb30d56d1fe96c381af3ac218839097978e95db0fe60631fc623b22a1e19b44765f8c

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                717B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                ec8ff3b1ded0246437b1472c69dd1811

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                d813e874c2524e3a7da6c466c67854ad16800326

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e634c2d1ed20e0638c95597adf4c9d392ebab932d3353f18af1e4421f4bb9cab

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e967b804cbf2d6da30a532cbc62557d09bd236807790040c6bee5584a482dc09d724fc1d9ac0de6aa5b4e8b1fff72c8ab3206222cc2c95a91035754ac1257552

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                300B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                bf034518c3427206cc85465dc2e296e5

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                ef3d8f548ad3c26e08fa41f2a74e68707cfc3d3a

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e5da797df9533a2fcae7a6aa79f2b9872c8f227dd1c901c91014c7a9fa82ff7e

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                c307eaf605bd02e03f25b58fa38ff8e59f4fb5672ef6cb5270c8bdb004bca56e47450777bfb7662797ffb18ab409cde66df4536510bc5a435cc945e662bddb78

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1B1495DD322A24490E2BF2FAABAE1C61

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                300B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                bf034518c3427206cc85465dc2e296e5

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                ef3d8f548ad3c26e08fa41f2a74e68707cfc3d3a

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e5da797df9533a2fcae7a6aa79f2b9872c8f227dd1c901c91014c7a9fa82ff7e

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                c307eaf605bd02e03f25b58fa38ff8e59f4fb5672ef6cb5270c8bdb004bca56e47450777bfb7662797ffb18ab409cde66df4536510bc5a435cc945e662bddb78

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                1KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                b1191699f68adb02b4e7b47ef8ca842e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                7288efedf6549666a69f7fb786ff32a3ab97b2f6

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e00869db812bb2d2b34b675401577ffd236b7bd0213c0011d7e01bad6c4c439d

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                44f1a62f1fb4eeadd4aa39b0042eed7596e07005286399fd0712fbce697fb10d0bf550ce9b81056d8b3e6df3999312d6fa18c659d0856f5af754201b7785c251

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_C668445AACCF7A560A7B569C97BA4550

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                471B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                4137072d08ee425a0d78c52ac9e56f01

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                5cc69fe280f73e93e90b4de7cb02077645671280

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                591779d4a60d5341db9ea338be033320d400a9ecf3350b435ea9d226c6f9b89c

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                19d7510f62b922a60c000143c165dd6e6aa86b1ac9c60b89cfa560c32c35029bc9e697957b0c5d4fc93f3733f4ccb0895cca698a114b478c7035fa4ef71a12e3

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\66F835E41EC6A985EB9271E4A70169D7_CF44E3C99F7F4AC558EEB35244F7E046

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                1KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                1284dd663c14708304383e87372dcb9e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                d1ea7d7b8f700bb3ce409fc102485b947e76be1a

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e2d6903fe35e6f1e58a89946089e318c199a4912c0a95bedde09f48c608c943c

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                54cbbbbfa23b63853223dd13bef957b9ef50193ff1acd57851d23d39077ce254b4f1209138c58dd5c9892aae92d4dbe87e3b95f6edcc5479744aeae41bd86277

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\81B9B36F9ABC4DA631A4713EE66FAEC6_AB4C996CC84269C73BB9D628423104CF

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                941B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                f4746831c81054fbef980001401482ab

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2957593973e6af0da0ec000df0b55ee6da9dde8e

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                ff9f46c484cedab89b768d0b55eb51058fbadce4d3e8977998356c8e28d1f4a8

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                a135d2d88aae845735acf14c0f81af72f8a173301a39a9404f31f3458402340608ecf2a5bd1bc2174f61a2f004b9af3db6ecce351df5adfea547bccef3919704

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                60KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                589c442fc7a0c70dca927115a700d41e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                66a07dace3afbfd1aa07a47e6875beab62c4bb31

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                2e5cb72e9eb43baafb6c6bfcc573aac92f49a8064c483f9d378a9e8e781a526a

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                1b5fa79e52be495c42cf49618441fb7012e28c02e7a08a91da9213db3ab810f0e83485bc1dd5f625a47d0ba7cfcdd5ea50acc9a8dcebb39f048c40f01e94155b

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                724B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                5a11c6099b9e5808dfb08c5c9570c92f

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                e5dc219641146d1839557973f348037fa589fd18

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                91291a5edc4e10a225d3c23265d236ecc74473d9893be5bd07e202d95b3fb172

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                c2435b6619464a14c65ab116ab83a6e0568bdf7abc5e5a5e19f3deaf56c70a46360965da8b60e1256e9c8656aef9751adb9e762731bb8dbab145f1c8224ac8f9

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                512B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                0ab46045506ded9f88cf8e680c4a826c

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                ec9b79fc2c017ac46866d8aa55908ea34c577486

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                ba6ac406ac3f00064f542b15fe20919c1f60b97346db4c6d4b40c3d96daa6aa1

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e0e3e196c31475abd10cd57135353253a98736af12777192fed18775713197836093f80f565bf3b0e81caf336fec36d567291b01156635512ca71939cc5dc3cc

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                512B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                0ab46045506ded9f88cf8e680c4a826c

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                ec9b79fc2c017ac46866d8aa55908ea34c577486

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                ba6ac406ac3f00064f542b15fe20919c1f60b97346db4c6d4b40c3d96daa6aa1

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e0e3e196c31475abd10cd57135353253a98736af12777192fed18775713197836093f80f565bf3b0e81caf336fec36d567291b01156635512ca71939cc5dc3cc

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                512B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                0ab46045506ded9f88cf8e680c4a826c

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                ec9b79fc2c017ac46866d8aa55908ea34c577486

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                ba6ac406ac3f00064f542b15fe20919c1f60b97346db4c6d4b40c3d96daa6aa1

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e0e3e196c31475abd10cd57135353253a98736af12777192fed18775713197836093f80f565bf3b0e81caf336fec36d567291b01156635512ca71939cc5dc3cc

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                512B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                0ab46045506ded9f88cf8e680c4a826c

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                ec9b79fc2c017ac46866d8aa55908ea34c577486

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                ba6ac406ac3f00064f542b15fe20919c1f60b97346db4c6d4b40c3d96daa6aa1

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e0e3e196c31475abd10cd57135353253a98736af12777192fed18775713197836093f80f565bf3b0e81caf336fec36d567291b01156635512ca71939cc5dc3cc

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\0DA515F703BB9B49479E8697ADB0B955_7DAD5545724AA2C98C55095F428499FB

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                512B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                f0c370552d11e425ed879418f0f4ca1b

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                4f90c91fe6af1a317fa95ae9496b4e2060da8286

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                bdbcbd60dd11001c379520abb1865a2711c024490f5476b26b1dacd6a5e8ad02

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                65468164c83467404e06c4b5b44b8c305c04add5feaa2ee42a00ef1b4cb66dad592024701787069c1ea95a23e8964b96067e550bb969ca30df443cc31e4d827e

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                192B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                74d9eeea83c164fbe5e988c97b0ade6d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                264504e29bd6ba5acc9d57a84349ad9ec4c46531

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                ec2f198cbc4628fdce5bc8ed42c0f1b3b93c692dc7a6ef042c02654e954f61db

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                0f452023e46c967add79eabfd3b077fde64f2a2ca24e7885c630a26943cd82479d539ee83a83e96d13f2eece15c473a221e0b8ce32ebf5578a40a51911d85e3b

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                192B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                415b95f7360e67af216d6a801a9d7bb6

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                e988fb4463815d26a4ed339d856d6dcf2fadc860

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e19c72a659f7360b005102596da42c02bdd8c6a3f897f1da02292d53ed1ed755

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                86fd1e160d98a91da52bbedbd9431b90267b03d6996de16df735d889ef54ef3fed289937921d3fcc3b14463183e46c494a9a6b4fe3eef37b9d451f8b22b6675e

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                192B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                a311840462e80e3b7720da53e76bd6bb

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                017efcf28667fbc2526ff3b9ad325f3d59078ce9

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                b8b8d8f71b847cf95db324685256618812f95c39449fa7096160c2555fa9b231

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                840a7a82428aaee5a092d3c03225c61ff55073c072e1f76be313622beadce18872d0ee9b3c1b38ac19ed8e5b670f6537153a0555ff6c0ce6604965e9cb5fbc25

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                410B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                56226df85afc0634dd708c14b41f8990

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                0636a5690b2404a350ca913db23e908dbe1eae52

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                352ac785a260601ff38517ac0e41dab8489beef6a984805b27034b0d9bc08fa9

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                a3494fbd4c629cd75d3c11a00b13965daa97a2264d81b80080a42d35cad127f537895c13239ee96bc3ddd996384eb24442b6709fae86700b47c0ed02b1625d78

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_C668445AACCF7A560A7B569C97BA4550

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                406B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                1ca166490e302e786ce1308fc435b754

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                1917b756912f31d6c0ffbda5a03cff6bc7de82d8

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                deaab42c3b26dd80fd6db5c79cfc159fe9dc938fb4fd0aa8187e8be4551008fc

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                c1873d9e49c7635a9318b1c46aab47a295caf9948ed3d16a314448f2571f0783bc6b6af2aa1369a8eb986589ac5ceb080826af04b83813fbb3c90c7cbb49200c

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\66F835E41EC6A985EB9271E4A70169D7_CF44E3C99F7F4AC558EEB35244F7E046

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                502B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                a9db14b4f56849f487623ebc7ef6e22e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                5d61b1e322b94b708288a8a41bc96d015a6822ad

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                48693ee21f08e45aadc6a05a8f74da6910fedf3036e23446ccf42135e5485ca0

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                6d0668da655dba6000c361dc755be8f40d707e1aff7f4616db2756b7bd1262fc79b587620fbefce9c062f559af83350e0c102cae62f8d14310b4ec7dca953931

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\81B9B36F9ABC4DA631A4713EE66FAEC6_AB4C996CC84269C73BB9D628423104CF

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                520B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                efa093bc0601ad236802815ca9b2752f

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                267bf14303347f02b701aa005e3ad7cfd09b1998

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                74b6837b0c72d1609416045b6ebe0d582a736e028d3dfe1d84330d81fb604bb4

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                c17a1b7c02540558748b0692257d5c2ff3c1e85e4b021df693a98120b8b3f025d617e33fccf3bbdcdedbc0e5c6d6743ec08a88c819742c0c7ec9260f5cf57ab6

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                344B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                0fc1d2f02715f2482d0fed845ecd5a91

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2de6fadc2beefc3713c776652fc32b71a03b95b9

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                65074aa63ad89961cb0633db0e9bfee046f5569048aa6ebc3b0d8c7708daf437

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                734b912ceabb2d2036ff2e49c7adc1a02f16f7be60f45700839be24f3442ddfc4dde35a95b47fbd19f0f89404c6737dac2685ef229616a093515eddcf0ea200c

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                340B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                3f871c819b73aa914ceea9ed10b7644b

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                41f039b888ed83e21a2fe55394cc718996230de6

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                ad86f5810940fed1d3f1b4a69d56a20bc488203a5fc64fea7953ff66b159767d

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                ddd86c0edae853f88c567323a6174bf3451b7223b49c5a8c3b5bed2e23b25773fcafea24c0e7fb4cc34a95b324600871de5745cba5ad449bae94238639c3d8bc

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                340B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                8d7854d97c7bb17ffae30eb52e29413b

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                d6295c179cf8bd9c935a30e9b58f6a6a6066a565

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                316d38a1a1d2e84678b58e15672e51202f6a056a60a1d88590eeb5b360da6a79

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                99e7801caf97043317814fa7f33296a1835a23e58cac402335d2d040dd96458065a742c2c1c96f994de7c535cf47ed1f7c3f75601814e67cb58baf864bbcaaef

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                340B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                8d7854d97c7bb17ffae30eb52e29413b

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                d6295c179cf8bd9c935a30e9b58f6a6a6066a565

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                316d38a1a1d2e84678b58e15672e51202f6a056a60a1d88590eeb5b360da6a79

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                99e7801caf97043317814fa7f33296a1835a23e58cac402335d2d040dd96458065a742c2c1c96f994de7c535cf47ed1f7c3f75601814e67cb58baf864bbcaaef

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                340B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                2cdb274e46ce1efb566ca9525d565e20

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                55d94c632bfe2ab9e6aa8abf0580f8031e975fb5

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                d2c7f0d01229956e015b09c88f0081c7ebe0ec6aeb6d3402dc09e36732660fe4

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                5c6d4096033a27346de00937ec2b9217d25a5f1b6c5b0a12fbc13d2605f9fef64e6cf03730970b7247aea984fb1fb1c6a9733aaf6caeb4ef41c29c5fdc1dfada

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                392B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                55eec5fdcec943210601563641e79c5d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                b823df0198568d084238b3cfffc4373ecf9692f0

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                83151e6b17685c0f91cd386f8788b0839e6c08b58c0eab2fbe57773009976279

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                312de74a334d6042d4625110e947984982c5603fd14bcfee483415e1719a6561c6f9a9c3bc6600fe3d77d056f292d11662ab6a22f507275626f20bee8ab7cdd0

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2253EB01-03CF-11ED-95E2-F2A7A8855ABA}.dat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                4KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                af038a549715ef4a999011f110392263

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                b34ea6145c35f2aa139d0d061df8c605e0bb308a

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7f75eefcf0cc78ffa2814ecf4c0c0612a2da4c11ecf126cb9f9f5945ba5c0f4d

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                cf76f344b5c7ae2a729aa96b7074e559c14c5b7c56647a4720ebec2872db2f04dbcc7ed9e47f067f234342eb74ec9a7027731a65c558b7d76b2cfa64ad7e0875

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{243E4641-03CF-11ED-95E2-F2A7A8855ABA}.dat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                3KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                bf76117072fb6964a6f00c53b887f4a6

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                8b5ac0975e9a70536785b7f385d60523cd10de70

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                a6c93f7356181aa9a18caf179a00a16dca1b429e17831b1709c53df97d07a641

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                ddfef0372ae350fb3fbee9a05f654dfc969fa483bc2168f2c1c672b9fd84c120f82f1a73d536e6e9e6ed6bc3cdf02afedc7c9f3e9f02332b93979c861a4b5d88

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{253F5AC1-03CF-11ED-95E2-F2A7A8855ABA}.dat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                3KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                b5511f2a5cffd38b41da4f9545d3c1a9

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                d9f5142d024c26dc4ed43091e2d13992225a3ab5

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                b2ff82377583f3261d107fee552575746c55a15ba83ac5255a8db7a3fcae4ec8

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                26addca3de3921a4f5b8b6d05d2e264d1069af3426f8ca1b51d39c53bc62ad54520c74332866f312a5d3f8242a4fcb382d1352109f5ea4bd131b669fb10f107b

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{253F5AC1-03CF-11ED-95E2-F2A7A8855ABA}.dat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                5KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                7e103958723078b8e4bbf1d703e7b53d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                6ad94e513830f2ffef54f05bff08158ad29c9a27

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                70370352d54f2fd6b0946b780478bc33ac4f6f20492a01a4d92b1087079db8dc

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                fa5ff62237094283268835ba6c1cd689abe71b183d06c6c436f49ea053de6b48acb6364bd082ccd65940de3d16392162050476e7638a25d9c42f3530c7568ce0

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2BF39A20-03CF-11ED-95E2-F2A7A8855ABA}.dat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                5KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                1132f8a87a0841df3fcceca39abf74a5

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                03fb398d5e6491cb8cd409d3acc629c25b0d06b3

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                5508931c112fb9bfeb10988fc6b54d9dc9af7600ffde4dc27dd4640fabed1162

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                07d1f7e4b19a61deb1b26c4f3fe24b47fb082d64da34ac0ef5ed449c6d0fc8a8f3ecbe0827fdc1b9951b8601bae8ba29ba8e5a66d8e52d837386281a0e4a24ab

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2C742460-03CF-11ED-95E2-F2A7A8855ABA}.dat

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                3KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                8ffc67661b5dc74bae8996d11ec93113

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                3cec2532824bf162aafe1f74b189056141d1e816

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                1e418b8aad52284e6bf42c0de27d2bca46edb44c44f7733a8361660f0d3df8a6

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                7f110118520cf7e0110964365b3513f0b05ff118cf713ac5a3a12d2ffa580195e6ee8768ae30bc88df250744defb655755570bad12929773be03d0fc3a77d8ec

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\4T20EHYT.txt

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                483B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                3c6e95929c4c64bd4eb448b172785cb3

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                10ba20786b338e878d316af31395f0f85a079268

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                29077d52ccb5a4a66357d7a3fb55368fda8b08fb57abbbf02dd20663a45011cd

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                ea05b359c3317132719cbf7ddc243521b9e40bec338c2cceb30d46bd9994f9314c46d26035fa7e8d7fc6c946058190cbf688a928e044a9603e62e7eefe8255a9

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\KE718CE1.txt

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                483B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                51e70a9856784131ee6cb59f4327a0ef

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                aaa8f60b2a7593adcd0e82177240341d6d8ee74d

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                469a12e929468bedc85d008991fca88a372a23c705eb6823437a7b6d2a7772be

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                b6a5984536266434fe4660e4b7794756ec6c651c1c0e2702311cc747af0a3a9be6bfdae5a1b75d742c0720570810314abc9d0df27cb2f456f7187d458ed4d872

                                                                                                                                                                                                                                                                                                              • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Cookies\V0Q8L6R6.txt

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                90B

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                af88ba4b8c132f12d2cd5c603c4f6302

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                f7a0064f9208af5e4634ef73d4b683cb22f3c0a7

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7dcb1b19a4e11d3e4839b744f7e3bf5f92b7705d425f72b763c84194095977a3

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                4041d56ac7361bfff47fa5ce31437f82fcb6450ada0790a8dde05571aacbf802f03632be9060a1571f831d0367f704a03b42b01c8d7e90bb581f450702772060

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\ach\2.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                2.3MB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                5134f289dbf4abae370e3f36b637b73e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                c78d3f2d00dc47da0112a74df665c7a84a8e32c3

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e69c9383b5d9fe4e069ddee15797c52e9116f883ad3b1717d2519621ab2751b2

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                0bf61a04b93b1ba5b8a0e2d9a1c333cc4605350a4c797cc9f5f78fec698d6f4fd62d329513ed406e76a06aa6af0f00d206da723e5a33315ce8de7f68f2002cb5

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\ach\2.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                2.3MB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                5134f289dbf4abae370e3f36b637b73e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                c78d3f2d00dc47da0112a74df665c7a84a8e32c3

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e69c9383b5d9fe4e069ddee15797c52e9116f883ad3b1717d2519621ab2751b2

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                0bf61a04b93b1ba5b8a0e2d9a1c333cc4605350a4c797cc9f5f78fec698d6f4fd62d329513ed406e76a06aa6af0f00d206da723e5a33315ce8de7f68f2002cb5

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\ach\2.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                2.3MB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                5134f289dbf4abae370e3f36b637b73e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                c78d3f2d00dc47da0112a74df665c7a84a8e32c3

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                e69c9383b5d9fe4e069ddee15797c52e9116f883ad3b1717d2519621ab2751b2

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                0bf61a04b93b1ba5b8a0e2d9a1c333cc4605350a4c797cc9f5f78fec698d6f4fd62d329513ed406e76a06aa6af0f00d206da723e5a33315ce8de7f68f2002cb5

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\skleika\ach.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                837KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                ab4470038abfcf2550f50cb94537165e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2aaa0e7137e2c09ab7f0cc5bcaf088521edad9f0

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7c80903c5d1765f106a9a25187c32b40a9f7ab11ebf40d8117ba5b80acc5f3e9

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                b6853047083ccb5e4d0c13cad934366506dfb3decaefc9a06c26a255b1d0704b38047cafba2daa4cfb1bf09b3ef5ebe79153eee0ae8ea5cc8f534f280c50e7f4

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\skleika\ach.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                837KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                ab4470038abfcf2550f50cb94537165e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2aaa0e7137e2c09ab7f0cc5bcaf088521edad9f0

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7c80903c5d1765f106a9a25187c32b40a9f7ab11ebf40d8117ba5b80acc5f3e9

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                b6853047083ccb5e4d0c13cad934366506dfb3decaefc9a06c26a255b1d0704b38047cafba2daa4cfb1bf09b3ef5ebe79153eee0ae8ea5cc8f534f280c50e7f4

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\skleika\ach.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                837KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                ab4470038abfcf2550f50cb94537165e

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                2aaa0e7137e2c09ab7f0cc5bcaf088521edad9f0

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                7c80903c5d1765f106a9a25187c32b40a9f7ab11ebf40d8117ba5b80acc5f3e9

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                b6853047083ccb5e4d0c13cad934366506dfb3decaefc9a06c26a255b1d0704b38047cafba2daa4cfb1bf09b3ef5ebe79153eee0ae8ea5cc8f534f280c50e7f4

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\skleika\jopa.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                37KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                36e59be3c751683fc142c0ebd8d6a71d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                1e9632a2173588f606e6a354cdcbeddc91ab2c78

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                3611560138463ba5b2438d8691410a642875230b8db788751826a7b495371e4c

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e20d3f2c0ad628aa137c7dfde3d77ae09628f725af5f590dd4ff052a65975e7f0aa5fa5cbfb417ce57f0d34a36dccac3333885e2f91125946f8a29db27316eeb

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\skleika\jopa.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                37KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                36e59be3c751683fc142c0ebd8d6a71d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                1e9632a2173588f606e6a354cdcbeddc91ab2c78

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                3611560138463ba5b2438d8691410a642875230b8db788751826a7b495371e4c

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e20d3f2c0ad628aa137c7dfde3d77ae09628f725af5f590dd4ff052a65975e7f0aa5fa5cbfb417ce57f0d34a36dccac3333885e2f91125946f8a29db27316eeb

                                                                                                                                                                                                                                                                                                              • \Program Files (x86)\skleika\jopa.exe

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                37KB

                                                                                                                                                                                                                                                                                                                MD5

                                                                                                                                                                                                                                                                                                                36e59be3c751683fc142c0ebd8d6a71d

                                                                                                                                                                                                                                                                                                                SHA1

                                                                                                                                                                                                                                                                                                                1e9632a2173588f606e6a354cdcbeddc91ab2c78

                                                                                                                                                                                                                                                                                                                SHA256

                                                                                                                                                                                                                                                                                                                3611560138463ba5b2438d8691410a642875230b8db788751826a7b495371e4c

                                                                                                                                                                                                                                                                                                                SHA512

                                                                                                                                                                                                                                                                                                                e20d3f2c0ad628aa137c7dfde3d77ae09628f725af5f590dd4ff052a65975e7f0aa5fa5cbfb417ce57f0d34a36dccac3333885e2f91125946f8a29db27316eeb

                                                                                                                                                                                                                                                                                                              • memory/764-194-0x000007FEFBF51000-0x000007FEFBF53000-memory.dmp

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                8KB

                                                                                                                                                                                                                                                                                                              • memory/1260-222-0x0000000074290000-0x000000007483B000-memory.dmp

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                5.7MB

                                                                                                                                                                                                                                                                                                              • memory/1260-88-0x0000000074290000-0x000000007483B000-memory.dmp

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                5.7MB

                                                                                                                                                                                                                                                                                                              • memory/1964-54-0x0000000075F61000-0x0000000075F63000-memory.dmp

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                8KB

                                                                                                                                                                                                                                                                                                              • memory/2592-181-0x0000000000D51000-0x0000000000D53000-memory.dmp

                                                                                                                                                                                                                                                                                                                Filesize

                                                                                                                                                                                                                                                                                                                8KB

                                                                                                                                                                                                                                                                                                              We care about your privacy.

                                                                                                                                                                                                                                                                                                              This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.