Edit tour

Windows Analysis Report
https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/

Overview

General Information

Sample URL:	https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/
Analysis ID:	1368435
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Found iframes

HTML title does not match URL

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3608 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=2000,i,4763310102164380363,1880677161690082003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/

Avira URL Cloud: detection malicious, Label: phishing

Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: Iframe src: https://mc.yandex.com/metrika/metrika_match.html
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: Iframe src: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: Iframe src: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: Iframe src: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html

Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: Title: steam - , does not match URL
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: Title: steam - , does not match URL

Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: Form action: https://faq-kak.ru/wp-comments-post.php
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: Form action: https://faq-kak.ru/wp-comments-post.php
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: Form action: https://faq-kak.ru/wp-comments-post.php
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: Form action: https://faq-kak.ru/wp-comments-post.php
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: Form action: https://faq-kak.ru/wp-comments-post.php

Source: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html	HTTP Parser: No favicon
Source: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html	HTTP Parser: No favicon

Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: No <meta name="author".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: No <meta name="author".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: No <meta name="author".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: No <meta name="author".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: No <meta name="author".. found

Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: No <meta name="copyright".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: No <meta name="copyright".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	HTTP Parser: No <meta name="copyright".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: No <meta name="copyright".. found
Source: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.108.114
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.176.64
Source: unknown	TCP traffic detected without corresponding DNS query: 208.111.176.64
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 176.9.79.218
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.149

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kak-najti-svoyu-biblioteku-v-steam/ HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.build.css HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/css/style.min.css HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-yandex-metrika/assets/frontend.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-yandex-metrika/assets/contactFormSeven.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/imagesloaded.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/theme.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/drop-down-search.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://faq-kak.ru/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/ow-slider.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/scroll-effect.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/scroll-top.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/oceanwp/assets/js/select.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/quick-adsense-reloaded/assets/js/ads.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/comment-reply.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/akismet/_inc/akismet-frontend.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/rocket-lazy-load/assets/js/16.1/lazyload.min.js HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /system/context.js HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/system/context.js HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /partner-code-bundles/937691/ae84bbbd1296b7622b03.js HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /partner-code-bundles/937691/a6a4b083a73f3d813a26.js HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /partner-code-bundles/937691/a92bedce4b45bc60c7b9.js HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe-bundles/0.83/host.js HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /partner-code-bundles/937691/d053ed1897419218e52b.js HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /partner-code-bundles/937691/4c9a181cc3ad10f671b2.js HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://faq-kak.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003623%3Aet%3A1704065783%3Ac%3A1%3Arn%3A39487341%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Afp%3A7384%3Arqnl%3A1%3Ast%3A1704065785%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10234.s_UndBrRNMbNh5NrRcZ18nWf5mqJQwnxjsR9f_0qriXcYT6deia5YMKkVtsiEbeR.D3vICVDUgqF8gTKSQ2FMw1Namwc%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /watch/95527089/1?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003623%3Aet%3A1704065783%3Ac%3A1%3Arn%3A39487341%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Afp%3A7384%3Arqnl%3A1%3Ast%3A1704065785%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29ecs%280%29ti%281%29&redirnss=1 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; i=cRikEaxuewgj6d0pnW/OTt/Sm5V/aY7hYsU97yqmHS9f8LAuualjfyi0AIv+KrL+n0Hi6KY2m5gp7ZuhXBlX52X7HNI=; yandexuid=9623888321704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003627%3Aet%3A1704065788%3Ac%3A1%3Arn%3A593407504%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065788%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(75800)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10234.aUB3SqFXQihpV7u28KLmxTeuijO6AILiIGSmXB45GAmCA-XNN_aZ3BsS_WV9BFXEXcMi7wmyeblU8qtwS-FZj0MkgvXA4Qk_5OI8GDbVDq4cjs3HtAI8NG8YU0jZpZKsmuUtntd01uER4IpUIIbN4fUDZtK8LWl3RrBdwj7a9iOC8vJbKIpipFfqyZeRXA9Wr6kZKhssIdUzDHA-lArJPQTqlEdEzRmVWQ_JY3zD2Bg%2C.uciNXaA1uFCPKE6sbyPqFUdf9oo%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787; yuidss=6897081051704065787; ymex=1735601788.yrts.1704065788#1735601787.yrtsi.1704065787
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/5117979/picd78826bff11ea66acb1619af26b2e14b/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9710187/2a00000188a054ad11eb06c35a3e0c2ff733/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10314704/2a00000188a2f48cb87880501f5b2085a288/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9357242/piccc8b15d1bfcf5a264269aa8a33f81317/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9745244/pic73abb14c61340fef3dd851efc0e02f24/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065788_d84efc3243d59a09a663716ca77dd204a227e6f1afa39970976fdd6859c79c4f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003629%3Aet%3A1704065790%3Ac%3A1%3Arn%3A206004717%3Arqn%3A2%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065790%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(158700)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787; yuidss=6897081051704065787; ymex=1735601788.yrts.1704065788#1735601787.yrtsi.1704065787
Source: global traffic	HTTP traffic detected: GET /watch/95527089/1?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003623%3Aet%3A1704065783%3Ac%3A1%3Arn%3A39487341%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Afp%3A7384%3Arqnl%3A1%3Ast%3A1704065785%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29ecs%280%29ti%281%29&redirnss=1 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10234.aUB3SqFXQihpV7u28KLmxTeuijO6AILiIGSmXB45GAmCA-XNN_aZ3BsS_WV9BFXEXcMi7wmyeblU8qtwS-FZj0MkgvXA4Qk_5OI8GDbVDq4cjs3HtAI8NG8YU0jZpZKsmuUtntd01uER4IpUIIbN4fUDZtK8LWl3RrBdwj7a9iOC8vJbKIpipFfqyZeRXA9Wr6kZKhssIdUzDHA-lArJPQTqlEdEzRmVWQ_JY3zD2Bg%2C.uciNXaA1uFCPKE6sbyPqFUdf9oo%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003627%3Aet%3A1704065788%3Ac%3A1%3Arn%3A593407504%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065788%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(75800)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
Source: global traffic	HTTP traffic detected: GET /favicon/xn--80atu9c.xn--p1ai?size=120&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/5122202/2a00000188a2f2dd6c72992bc3482f2ff4f2/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/5117979/picd78826bff11ea66acb1619af26b2e14b/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10070214/picce57669c9a2289934f175395af242b91/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065788_d84efc3243d59a09a663716ca77dd204a227e6f1afa39970976fdd6859c79c4f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003629%3Aet%3A1704065790%3Ac%3A1%3Arn%3A206004717%3Arqn%3A2%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065790%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(158700)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10314704/2a00000188a2f48cb87880501f5b2085a288/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9357242/piccc8b15d1bfcf5a264269aa8a33f81317/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9710187/2a00000188a054ad11eb06c35a3e0c2ff733/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9745244/pic73abb14c61340fef3dd851efc0e02f24/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q/set/s/rsya-tag-users/bundle.js HTTP/1.1Host: yastatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=43554&callback_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbetweendigitalis%2F%24%7BUSER_ID%7D HTTP/1.1Host: ads.betweendigital.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yndx?id=9d4cd41a-f59d-4815-8a89-9d30806f5389 HTTP/1.1Host: px.arcspire.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rmatch/?dp=151&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F%24%7BUSER_ID%7D HTTP/1.1Host: acint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/mapuid/adobedmp/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /an/mapuid/betweenx/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /an/mapuid/blueseaxcom/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /favicon/xn--80atu9c.xn--p1ai?size=120&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /an/mapuid/google/?partner-tag=yandex_llc HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=43554&callback_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbetweendigitalis%2F%24%7BUSER_ID%7D&crf=1&rts=-3596667896408315238 HTTP/1.1Host: ads.betweendigital.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dc=was1; tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; ut=ZZH7AAAHckAYnS8qPygIxTXPYT0FCDkOZ1ys4A==; ss=1
Source: global traffic	HTTP traffic detected: GET /get-direct/4667035/YnGXQRupS_9KfdsimUL6_w/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clmap/95527089?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pointer-click=rn%3A689507476%3Ax%3A42613%3Ay%3A754%3At%3A91%3Ap%3AA%7BAAA%C2%89AA%3AX%3A575%3AY%3A636&browser-info=u%3A1704065783133633243%3Av%3A1201%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Arqnl%3A1%3Ast%3A1704065793&t=gdpr(14%2C14%2C14%2C14%2C14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check_secondary HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/5122202/2a00000188a2f2dd6c72992bc3482f2ff4f2/huge HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10070214/picce57669c9a2289934f175395af242b91/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=161&external_user_id=86BBE4B77D17937B HTTP/1.1Host: ads.betweendigital.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dc=was1; tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; ut=ZZH7AAAHckAYnS8qPygIxTXPYT0FCDkOZ1ys4A==; ss=1
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /get-direct/1783913/f9RmxpXOY7GrxYUwn9SCHA/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/4797691/kHoy_oSb5ZcwSmr86_-79Q/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/60662/EDT16RXL_Q2jRqVylYA9UA/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=423652&dpuuid=C2D1B88438B2B5A1 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5146926/qZYz2rttzhVwcK8Dsm8bag/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10426767/2a00000188a2f2f3429a0ae4264045d573d6/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rmatch/?r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F$%7BUSER_ID%7D&dp=151&tc=1 HTTP/1.1Host: acint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; aid=fwAAAWWR+wBtmTrls7IZAtcVKV0qBQkQfBtss5ZLD1d9Lf94
Source: global traffic	HTTP traffic detected: GET /pixel?s1=1&s2=1315&s3=vldyrx2shs82pv9o&cm=1&rd=1&puid=1EF296A0880109F7 HTTP/1.1Host: im.bluevoox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/arcspireis/2f5cae237caa1645c219dd HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yandex_llc&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/betweendigitalis/3d81c4af-64fb-5301-a603-3d28c392c628 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=423652&dpuuid=C2D1B88438B2B5A1 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=23040168177596022182881359646971805270
Source: global traffic	HTTP traffic detected: GET /set/s/rsya-tag-users/data?referrer=https%3A%2F%2Ffaq-kak.ru%2F HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yastatic.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yandex_llc&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bidder_id=161&external_user_id=86BBE4B77D17937B HTTP/1.1Host: ads.betweendigital.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dc=was1; tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; ss=1; ut=ZZH7AQAKYEAe6_DuSKaEEqWTM2zsgi1TskGIXg==
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start_secondary?redirect_domain=mc.yandex.com&token=10234.F6qkHwZSqpvhK8tv6-Q38LI0_hwctZDQL434LjVSvBWxP5XqPCwzUtZjqfHS9vKK.bnI1qX2RSfGi1yq7yPrgNebAogo%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; sync_cookie_csrf=886343449fake
Source: global traffic	HTTP traffic detected: GET /an/mapuid/google/?partner-tag=yandexcom HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /clmap/95527089?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pointer-click=rn%3A689507476%3Ax%3A42613%3Ay%3A754%3At%3A91%3Ap%3AA%7BAAA%C2%89AA%3AX%3A575%3AY%3A636&browser-info=u%3A1704065783133633243%3Av%3A1201%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Arqnl%3A1%3Ast%3A1704065793&t=gdpr(14%2C14%2C14%2C14%2C14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
Source: global traffic	HTTP traffic detected: GET /get-direct/4667035/YnGXQRupS_9KfdsimUL6_w/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/mapuid/google/?partner-tag=yandexru HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /get-direct/1783913/f9RmxpXOY7GrxYUwn9SCHA/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/4797691/kHoy_oSb5ZcwSmr86_-79Q/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5146926/qZYz2rttzhVwcK8Dsm8bag/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/10426767/2a00000188a2f2f3429a0ae4264045d573d6/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/60662/EDT16RXL_Q2jRqVylYA9UA/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=25&viewability-undetermined=0 HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
Source: global traffic	HTTP traffic detected: GET /mapuid/arcspireis/2f5cae237caa1645c219dd HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
Source: global traffic	HTTP traffic detected: GET /mapuid/betweendigitalis/3d81c4af-64fb-5301-a603-3d28c392c628 HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=423652&dpuuid=C2D1B88438B2B5A1 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=23040168177596022182881359646971805270; dpm=23040168177596022182881359646971805270
Source: global traffic	HTTP traffic detected: GET /an/mapuid/mailweb/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
Source: global traffic	HTTP traffic detected: GET /favicon/mebelstyle.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/tongbao.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fan.yandex.ru%252Fmapuid%252Fsapeis%252F$%257BUSER_ID%257D&dp=14 HTTP/1.1Host: ssp-rtb.sape.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/finexpert.capital?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/mapuid/minimobww/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yandexcom&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yandexru&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/mapuid/operacom/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide_secondary?token=10234.5_ASplhEEbcdkyBDhF3OwFpDn7cTV2mrqVSoyDYusz0AivqAJsdt9iHVrSUEdCs3ss0ldmKC4fNBomSdUQqdBGN_YwnRjL9_4vCs2kc1yYzanL5K5dGLIbMILcLmRPZMaqHlRBH4eBYfD7kD1X7FTyHBlhXUj3RvlY09EScIWk3ud0KRodgjF04mbZGNgIF_W7dnISJzGX5XPGzbUao8WqbYImzKdFobayIt6QBlXpc%2C.C4F6dvTSgyUtyyqIfo9SDH7P3pg%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
Source: global traffic	HTTP traffic detected: GET /an/mapuid/xapadsssp/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /set/s/rsya-tag-users/data?referrer=https%3A%2F%2Ffaq-kak.ru%2F HTTP/1.1Host: yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /favicon/laboratorija-krasoty-must-have.clients.site?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/mebelstyle.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yandexcom&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yandexru&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cr?key=yandex&url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fdmpweborama%2F{WEBO_CID} HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yacm HTTP/1.1Host: cm.tns-counter.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rmatch?dp=14&euid=3203420A03FB91657D01596802698676&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F$%7BUSER_ID%7D HTTP/1.1Host: acint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; aid=fwAAAWWR+wBtmTrls7IZAtcVKV0qBQkQfBtss5ZLD1d9Lf94; cSyncDp14v4=1704065793
Source: global traffic	HTTP traffic detected: GET /an/mapuid/yeahmobissp/ HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=25&viewability-undetermined=0 HTTP/1.1Host: yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /api/sync?demand=YANV2EU&userid=C84B2F53E2C8FECA&expires=1&usergroup=1 HTTP/1.1Host: yandex.digital-services.solutionsConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide_secondary?token=10234.5_ASplhEEbcdkyBDhF3OwFpDn7cTV2mrqVSoyDYusz0AivqAJsdt9iHVrSUEdCs3ss0ldmKC4fNBomSdUQqdBGN_YwnRjL9_4vCs2kc1yYzanL5K5dGLIbMILcLmRPZMaqHlRBH4eBYfD7kD1X7FTyHBlhXUj3RvlY09EScIWk3ud0KRodgjF04mbZGNgIF_W7dnISJzGX5XPGzbUao8WqbYImzKdFobayIt6QBlXpc%2C.C4F6dvTSgyUtyyqIfo9SDH7P3pg%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
Source: global traffic	HTTP traffic detected: GET /favicon/finexpert.capital?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/xn----7sbzoqcfi.xn--p1ai?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/tongbao.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /cm.gif?p=155&id=80FEBCAD1084E9B5 HTTP/1.1Host: ad.mail.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cr?key=yandex&url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fdmpweborama%2F%7BWEBO_CID%7D&bounce=1&random=213360216 HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AFFICHE_W=AAxqB4dAAwIA84
Source: global traffic	HTTP traffic detected: GET /favicon/laboratorija-krasoty-must-have.clients.site?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vendor=60143&uid=75C38572774F8FE5 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/mediascope/a25f35e32967d40c7ae0771106d89ad4ab87cb48a590cf065de50fb836997afa HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/sapeis/0100007F00FB9165E53A996D0219B2B3 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /an/mapuid/yeahmobissp/ HTTP/1.1Host: yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /match?id=182 HTTP/1.1Host: dm.hybrid.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=469&user_id=C84B2F53E2C8FECA&expires=1&user_group=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yandexdmp-match HTTP/1.1Host: dm.hybrid.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/xn----7sbzoqcfi.xn--p1ai?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/119/i/i?i=1704065785 HTTP/1.1Host: dmg.digitaltarget.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/syncsspdmp?sspid=4 HTTP/1.1Host: dsp.mpartner.digitalConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user-sync?dsp=94&t=image&uid=5E2625F243647E4E HTTP/1.1Host: sync.adkernel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm.gif?p=155&id=80FEBCAD1084E9B5 HTTP/1.1Host: ad.mail.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: VID=02XPUk1KP_oM002CXI2e8CoM:::0-0-0-aac53c5-0:CAASEBeyu-Xp3C0XNDS539Kzq_oaYM1nwG4HlxLIrU_YJ5rAEfQfbshcgs8ucsjpPKKO6KlxgZRZsMEAFkKf4ZusLvgkfWAxPWDpuk2sYRHsFHDObZEQQWGtHziZDJ2CVbkuP3CacXi7gQlJHOiJmEfv6hgRbQ
Source: global traffic	HTTP traffic detected: GET /sync?vendor=60143&uid=75C38572774F8FE5 HTTP/1.1Host: t.adx.opera.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=OPU35a80725292b449785eb96d8b460d471
Source: global traffic	HTTP traffic detected: GET /mapuid/targetixis/63dc9cd61753c4390643 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?dsp_id=469&user_id=C84B2F53E2C8FECA&expires=1&user_group=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=0b393a72-722a-4077-af79-c69c0b2206f9; c=1704065797; tuuid_lu=1704065797
Source: global traffic	HTTP traffic detected: GET /mapuid/sapeis/0100007F00FB9165E53A996D0219B2B3 HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/mediascope/a25f35e32967d40c7ae0771106d89ad4ab87cb48a590cf065de50fb836997afa HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /cookiesync/redirect/yandex?redirect_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbuzzooladspis%2F%24%7BUUID%7D HTTP/1.1Host: exchange.buzzoola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /server_match?partner_id=N&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fazerionis%2F{PUB_USER_ID} HTTP/1.1Host: euw-ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /awg/custom/119/i/i?call_source=awg&ts=1704065798606&i=1704065785 HTTP/1.1Host: dmg.digitaltarget.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: viuserid=juRug82kbCg1pFM7slKJ
Source: global traffic	HTTP traffic detected: GET /mapuid/dmphybridai/70b721e1459717066140?sign=1643685542 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/mediasurferis/TMqnTlgfVayKUMqZxVpLJWFJTnRqiRab HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=0b393a72-722a-4077-af79-c69c0b2206f9&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=26&viewability-undetermined=0 HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /ul_cb/server_match?partner_id=N&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fazerionis%2F%7BPUB_USER_ID%7D HTTP/1.1Host: euw-ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=72cd074f-1f56-429d-956b-4f5c3854b25f; tuuid_lu=1704065799
Source: global traffic	HTTP traffic detected: GET /mapuid/buzzooladspis/6e571dea-6068-4248-5b37-8ba353285112 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/targetixis/63dc9cd61753c4390643 HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /sync/yandex/ HTTP/1.1Host: eye.targetads.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/sync/yandex HTTP/1.1Host: kimberlite.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=0b393a72-722a-4077-af79-c69c0b2206f9&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_466=16530-0b393a72-722a-4077-af79-c69c0b2206f9; PugT=1704065799
Source: global traffic	HTTP traffic detected: GET /mapuid/dmpamberdata/juRug82kbCg1pFM7slKJ HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/dmphybridai/70b721e1459717066140?sign=1643685542 HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/mediasurferis/TMqnTlgfVayKUMqZxVpLJWFJTnRqiRab HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=26&viewability-undetermined=0 HTTP/1.1Host: yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/azerionis/72cd074f-1f56-429d-956b-4f5c3854b25f HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /user-sync?dsp=94&t=image&uid=5E2625F243647E4E HTTP/1.1Host: sync.adkernel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /userbind?src=yandex&pbf=1&gi=1 HTTP/1.1Host: match.new-programmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/buzzooladspis/6e571dea-6068-4248-5b37-8ba353285112 HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /yandex/cm?user_id={partner_user_id} HTTP/1.1Host: nr.bidderstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync3.302?pid=188 HTTP/1.1Host: profile.ssp.rambler.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/part_id/11732138183223988288 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /p?ssp=toptraffic&id=ZZH7Ca1W1uM HTTP/1.1Host: sm.rtb.mts.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/targetrtbis/ HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /yandex/cm?user_id={partner_user_id}&pupa=1 HTTP/1.1Host: nr.bidderstack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/dmpamberdata/juRug82kbCg1pFM7slKJ HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /match?external_user_id=72cd074f-1f56-429d-956b-4f5c3854b25f&publisher_dsp_id=429&publisher_call_type=redirect HTTP/1.1Host: match.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=72cd074f-1f56-429d-956b-4f5c3854b25f; tuuid_lu=1704065799
Source: global traffic	HTTP traffic detected: GET /p/cm/yandexssp HTTP/1.1Host: px.adhigh.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/ramblerssp/ HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /um/y HTTP/1.1Host: rtb-eu-warsaw.intent.aiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?external_user_id=72cd074f-1f56-429d-956b-4f5c3854b25f&publisher_dsp_id=429&publisher_call_type=redirect HTTP/1.1Host: match.360yield.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=72cd074f-1f56-429d-956b-4f5c3854b25f; tuuid_lu=1704065799
Source: global traffic	HTTP traffic detected: GET /match/501 HTTP/1.1Host: s.uuidksinc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/second?ssp=59&exu=ZZH7Ca1W1uM HTTP/1.1Host: vma.mts.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dspid=e27c7e98-47aa-4e02-bd89-b573f3e9f025
Source: global traffic	HTTP traffic detected: GET /p?ssp=yandex&id=map HTTP/1.1Host: sm.rtb.mts.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dspid=e27c7e98-47aa-4e02-bd89-b573f3e9f025
Source: global traffic	HTTP traffic detected: GET /mapuid/targetrtbis/ HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /p/cm/yandexssp?bounced=1 HTTP/1.1Host: px.adhigh.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gi_u=78eEqA8RIBw.AikABlGMwjyiow
Source: global traffic	HTTP traffic detected: GET /um/y HTTP/1.1Host: rtb-eu-warsaw.intent.aiConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/ramblerssp/ HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /dmp/scr.php HTTP/1.1Host: sonar.semantiqo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/rtb/dmp/pixel?partner=yandex HTTP/1.1Host: shopnetic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-bin/sync.cgi?dsp_id=109 HTTP/1.1Host: ssp.adriver.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/kadamis/jlsh0vPI9KeQ7HmZAbgh HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /match/second?ssp=55 HTTP/1.1Host: vma.mts.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dspid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa; reset_cookie=1
Source: global traffic	HTTP traffic detected: GET /mapuid/getintentis/78eEqA8RIBw.AikABlGMwjyiow HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /?dsp_uid=e27c7e98-47aa-4e02-bd89-b573f3e9f025&return_url=https%3A%2F%2Fpixel.konnektu.ru%2Fredirect%2Fmts%3Fcallback_url%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D1%2526ssp%253Dkonnektu%2526id%253D%257BUSER_ID%257D HTTP/1.1Host: tech.rtb.mts.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dspid=e27c7e98-47aa-4e02-bd89-b573f3e9f025
Source: global traffic	HTTP traffic detected: GET /api/rtb/dmp/pixel?partner=yandex&tc=1 HTTP/1.1Host: shopnetic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=1
Source: global traffic	HTTP traffic detected: GET /cgi-bin/sync.cgi?ssp_id=19 HTTP/1.1Host: ssp.adriver.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id127/reff-id.gif?sid=dc9184c219bd4f10a1ea45afbea02ea2 HTTP/1.1Host: counter.yadro.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/kadamis/jlsh0vPI9KeQ7HmZAbgh HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /cgi-bin/sync.cgi?dsp_id=109 HTTP/1.1Host: ssp.adriver.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/getintentis/78eEqA8RIBw.AikABlGMwjyiow HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /?dsp_uid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa&return_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fmtsdspis%2F6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1Host: tech.rtb.mts.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dspid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa; reset_cookie=1; mts_id=cefee669-5874-4c83-a6f5-4e5b6eec28c7; mts_id_last_sync=1704065805
Source: global traffic	HTTP traffic detected: GET /?src=yandex HTTP/1.1Host: sync.bumlam.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?src=yandex2 HTTP/1.1Host: sync.bumlam.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/rtb/dmp/pixel?partner=yandex&tc=1 HTTP/1.1Host: shopnetic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=1; shuniq=pCX6AZl7n_VNArG5XeOx1PghDdE
Source: global traffic	HTTP traffic detected: GET /redirect/mts?callback_url=https%3A%2F%2Fvma.mts.ru%2Fem%3Fnext%3D59%26em%3D1%26ssp%3Dkonnektu%26id%3D%7BUSER_ID%7D HTTP/1.1Host: pixel.konnektu.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fbfli/data_sess_sync.php?spid=&sid=dc9184c219bd4f10a1ea45afbea02ea2 HTTP/1.1Host: sonar.semantiqo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: semantiqo_a=dc9184c219bd4f10a1ea45afbea02ea2; check=385c527be6024268942e57d82e1f2d49
Source: global traffic	HTTP traffic detected: GET /cgi-bin/sync.cgi?ssp_id=19 HTTP/1.1Host: ssp.adriver.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/yandexortb HTTP/1.1Host: sync.dmp.otm-r.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mapuid/mtsdspis/6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /match/yandex?id=[buyerUid] HTTP/1.1Host: sync.gonet-ads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?src=yandex2&s_data=CAIQARiO9sesBqIBEHX7ZNSoNRHuhuAAJZDAZHw* HTTP/1.1Host: sync.bumlam.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suuid3=IiQ3NWZiNjRkNC1hODM1LTExZWUtODZlMC0wMDI1OTBjMDY0N2M
Source: global traffic	HTTP traffic detected: GET /yandex/sync HTTP/1.1Host: sync.upravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?src=yandex HTTP/1.1Host: sync.bumlam.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /em?next=59&em=1&ssp=konnektu&id= HTTP/1.1Host: vma.mts.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dspid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa; reset_cookie=1; mts_id=cefee669-5874-4c83-a6f5-4e5b6eec28c7; mts_id_last_sync=1704065805
Source: global traffic	HTTP traffic detected: GET /0.gif?pid=YANDEX HTTP/1.1Host: x01.aidata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fbfli/data_sess_sync.php?spid=&sid=dc9184c219bd4f10a1ea45afbea02ea2 HTTP/1.1Host: sonar.semantiqo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: semantiqo_a=dc9184c219bd4f10a1ea45afbea02ea2; check=385c527be6024268942e57d82e1f2d49
Source: global traffic	HTTP traffic detected: GET /sync HTTP/1.1Host: yandex-dmp-sync.rutarget.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yandex/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly95YXN0YXRpYy5uZXQvIl19fQ HTTP/1.1Host: sync.upravel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session_tptc=1704065807189
Source: global traffic	HTTP traffic detected: GET /mapuid/mtsdspis/6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/adsniperis/75fb64d4-a835-11ee-86e0-002590c0647c HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /sync HTTP/1.1Host: yandex-sync.rutarget.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/yandex?id=%5BbuyerUid%5D&chk=1 HTTP/1.1Host: sync.gonet-ads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chk=1
Source: global traffic	HTTP traffic detected: GET /0.gif?pid=YANDEX&bounce=1 HTTP/1.1Host: x01.aidata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __upin=hE5fvW5C6phElzeLbqladQ; __upints=1704065807
Source: global traffic	HTTP traffic detected: GET /rtb/sync/mts?u=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1Host: kimberlite.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: as=OFrH4WWR-wk; f=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsoltadspis%2FZZH7Ca1W1uM; n=1; u=ZZH7Ca1W1uM~q8RWLvAMdkdTezQk86fZXKmI25Q
Source: global traffic	HTTP traffic detected: GET /mapuid/dmpsegmento/8bTMhvSUvgSm?sign=2012646411 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/upravelis/bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/adsniperis/75fb64d4-a835-11ee-86e0-002590c0647c HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/rutargetis/3y1D5Vf4cNDE HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /metrika/watch.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; sync_cookie_csrf=886343449fake; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/gonetisnew/NDZlYTdiZjNhZTRmNGQ3Nw HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/dmpaidatame/hE5fvW5C6phElzeLbqladQ?sign=276513664 HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/soltadspis/ZZH7Ca1W1uM HTTP/1.1Host: an.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /mapuid/dmpsegmento/8bTMhvSUvgSm?sign=2012646411 HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/upravelis/bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/rutargetis/3y1D5Vf4cNDE HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/gonetisnew/NDZlYTdiZjNhZTRmNGQ3Nw HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/dmpaidatame/hE5fvW5C6phElzeLbqladQ?sign=276513664 HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /mapuid/soltadspis/ZZH7Ca1W1uM HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A228187864810%3Ahid%3A794577329%3Az%3A60%3Ai%3A20240101003650%3Aet%3A1704065810%3Ac%3A1%3Arn%3A103385644%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Ast%3A1704065810&t=clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yastatic.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
Source: global traffic	HTTP traffic detected: GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A228187864810%3Ahid%3A794577329%3Az%3A60%3Ai%3A20240101003650%3Aet%3A1704065810%3Ac%3A1%3Arn%3A103385644%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Ast%3A1704065810&t=clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
Source: global traffic	HTTP traffic detected: GET /watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22b%22%3A%22%22%2C%22browser%22%3A%22chrome%22%2C%22extensions%22%3A%22%22%2C%22fresh%22%3A%220%22%2C%22fromCancel%22%3A%22false%22%2C%22fromGoogle%22%3A%22false%22%2C%22infected%22%3A%22%22%2C%22loyal%22%3A%220%22%2C%22old%22%3A%22actual%22%2C%22os%22%3A%22windows%22%2C%22p%22%3A%22%22%2C%22sbscrb%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22winxp%22%3A%22%22%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1358133347124%3Ahid%3A794577329%3Aphid%3A1042935619%3Az%3A60%3Ai%3A20240101003653%3Aet%3A1704065813%3Ac%3A1%3Arn%3A1021585331%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1704065813%3At%3A&t=gdpr(6)clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://yastatic.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
Source: global traffic	HTTP traffic detected: GET /watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22b%22%3A%22%22%2C%22browser%22%3A%22chrome%22%2C%22extensions%22%3A%22%22%2C%22fresh%22%3A%220%22%2C%22fromCancel%22%3A%22false%22%2C%22fromGoogle%22%3A%22false%22%2C%22infected%22%3A%22%22%2C%22loyal%22%3A%220%22%2C%22old%22%3A%22actual%22%2C%22os%22%3A%22windows%22%2C%22p%22%3A%22%22%2C%22sbscrb%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22winxp%22%3A%22%22%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1358133347124%3Ahid%3A794577329%3Aphid%3A1042935619%3Az%3A60%3Ai%3A20240101003653%3Aet%3A1704065813%3Ac%3A1%3Arn%3A1021585331%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1704065813%3At%3A&t=gdpr(6)clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /kak-najti-svoyu-biblioteku-v-steam/ HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: quads_browser_width=1280; _ym_uid=1704065783133633243; _ym_d=1704065783; _ym_isad=1
Source: global traffic	HTTP traffic detected: GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003703%3Aet%3A1704065824%3Ac%3A1%3Arn%3A72148332%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C566%2C1934%2C553%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065820463%3Afp%3A2678%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065824%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/05/cropped-pngwing.com_-32x32.png HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065822
Source: global traffic	HTTP traffic detected: GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003703%3Aet%3A1704065824%3Ac%3A1%3Arn%3A72148332%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C566%2C1934%2C553%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065820463%3Afp%3A2678%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065824%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /get-direct/2079704/CqlfRiIvmmNbyB9_IYd8tw/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065822
Source: global traffic	HTTP traffic detected: GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003707%3Aet%3A1704065827%3Ac%3A1%3Arn%3A942903913%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065827%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(64300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2
Source: global traffic	HTTP traffic detected: GET /get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2023/05/cropped-pngwing.com_-32x32.png HTTP/1.1Host: faq-kak.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065822
Source: global traffic	HTTP traffic detected: GET /get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/steam.megakod.com?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/2079704/CqlfRiIvmmNbyB9_IYd8tw/wy150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065828%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003707%3Aet%3A1704065827%3Ac%3A1%3Arn%3A942903913%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065827%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(64300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /get-direct/4797247/ixuJwznszqKVxLJ3r4kPqQ/y150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5146926/b8_SoKGCJf1bxAcZNxExjQ/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/compday.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/easypay.world?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/expert-massage.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/deart-13.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/steam.megakod.com?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065829%3Ac%3A1%3Arn%3A616456058%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C561%2C1440%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065829%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqO
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065828%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
Source: global traffic	HTTP traffic detected: GET /get-direct/4797247/ixuJwznszqKVxLJ3r4kPqQ/y150 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5146926/b8_SoKGCJf1bxAcZNxExjQ/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/easypay.world?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/compday.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/expert-massage.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/deart-13.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2
Source: global traffic	HTTP traffic detected: GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065829%3Ac%3A1%3Arn%3A616456058%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C561%2C1440%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065829%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /get-direct/5146926/ET8mENn2OZUHkOQLCeV7_w/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o-sayte/ HTTP/1.1Host: faq-kak.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065828; quads_browser_width=1280
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065831%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /get-canvas/5414461/2a0000018ad201d642545894fbb44d3bf70b/cropSource HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/tracking/WYeejI_zOoVX2Lc20UKG0BFVUJw4s8S8Un2D7aGP19FlikB5R7ziv8ArqyZSATDFTiXBVMTiuecMbfQMbfREZZC1Ofz3jgTHwJrjVlXheGNNz25Cmttm5b24IzE7tODWf8Unp-BubGF49WuMUX2NS1v0nwaYBL9wvY8WLN23vuJqEeE3NTvyRVGWoRcgi4N8g28Sp0Hm43D0XxTXl8GIRn2FEDAapPjb8SdWHQUzAnh6leRSB0ip-QeP6sdvJjQ89zI4SVgez1em0rWXDLochfDrlKRtPnfmrf4N0YHLOAD304McNZm2s680Ar904IvD6FGXSXETsGaJ9-8Bt19EO0jxYhShO4nLPBSj5hObdC0MmDWPSbEcKTcS2QnxCg6dL5eHO_b0ji8WK-Q0JDO4sMr64Q0CLHIAC2de4xmJp4pmX4QO2UMchjCnkWL7cEyGU0PB4zEA6AQRWiWDGm3ccorDFO_roHvsi1-kCRdbWozyQV-tmXRQzrROGljS2tzL_iu0LiZNEfdsdtKoxKppXYtCCWTUNTTrB6qMW6foftSlffQjysGlnkO8vSSxN5LjOFuRqxQcvCrxZvmaSOBoMrhNzKOdIPoWlDP7BHffZF9PVtO5yb674vGdYrvdpeYP0s6vf6yiLogLIciFBo5i6glys1iKJ2YLIcKE_1EKCK3U9OIHM-T1OTk2p9dkXMH0eSG9clySVkTxtV2Z7uVwzOL1qY_kGQLbCKdpVm00~2?action-id=11 HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /favicon/manner-matter.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5235951/_YTYfRylGb2kyKOb3jGtew/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqO
Source: global traffic	HTTP traffic detected: GET /favicon/solargameprotect.com?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7731570/2a0000018442f63b164e0c1f14366fe3af77/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5146926/ET8mENn2OZUHkOQLCeV7_w/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/mk-rns.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/sportmen.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/manner-matter.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
Source: global traffic	HTTP traffic detected: GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065836%3Ac%3A1%3Arn%3A801238757%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1159%2C65%2C3%2C0%2C%2C2964%2C41%2C%2C%2C%2C4217%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065831950%3Afp%3A4254%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065836%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065837%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvT
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065833_71ad6d1aad595bd3d11a412502e87d5dbb0a3290c9dc2bb59aa35d8426772947&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065837%3Ac%3A1%3Arn%3A223604385%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065837%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(20900)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /an/tracking/WYeejI_zOoVX2Lc20UKG0BFVUJw4s8S8Un2D7aGP19FlikB5R7ziv8ArqyZSATDFTiXBVMTiuecMbfQMbfREZZC1Ofz3jgTHwJrjVlXheGNNz25Cmttm5b24IzE7tODWf8Unp-BubGF49WuMUX2NS1v0nwaYBL9wvY8WLN23vuJqEeE3NTvyRVGWoRcgi4N8g28Sp0Hm43D0XxTXl8GIRn2FEDAapPjb8SdWHQUzAnh6leRSB0ip-QeP6sdvJjQ89zI4SVgez1em0rWXDLochfDrlKRtPnfmrf4N0YHLOAD304McNZm2s680Ar904IvD6FGXSXETsGaJ9-8Bt19EO0jxYhShO4nLPBSj5hObdC0MmDWPSbEcKTcS2QnxCg6dL5eHO_b0ji8WK-Q0JDO4sMr64Q0CLHIAC2de4xmJp4pmX4QO2UMchjCnkWL7cEyGU0PB4zEA6AQRWiWDGm3ccorDFO_roHvsi1-kCRdbWozyQV-tmXRQzrROGljS2tzL_iu0LiZNEfdsdtKoxKppXYtCCWTUNTTrB6qMW6foftSlffQjysGlnkO8vSSxN5LjOFuRqxQcvCrxZvmaSOBoMrhNzKOdIPoWlDP7BHffZF9PVtO5yb674vGdYrvdpeYP0s6vf6yiLogLIciFBo5i6glys1iKJ2YLIcKE_1EKCK3U9OIHM-T1OTk2p9dkXMH0eSG9clySVkTxtV2Z7uVwzOL1qY_kGQLbCKdpVm00~2?action-id=11 HTTP/1.1Host: yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065831%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /get-canvas/5414461/2a0000018ad201d642545894fbb44d3bf70b/cropSource HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-direct/5235951/_YTYfRylGb2kyKOb3jGtew/x180 HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7731570/2a0000018442f63b164e0c1f14366fe3af77/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/solargameprotect.com?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/sportmen.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/mk-rns.ru?size=32&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1)gdpr(14) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003720%3Aet%3A1704065840%3Ac%3A1%3Arn%3A330016578%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065840%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(83400)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /an/tracking/WYWejI_zOoVX2Lb_0TKG08DVUJw4s8S8Un2D7aGP19DlwZ9MURpISMNAJYDpfqm_xf2N-ixOn1CjBIqjBIsT7MS2n3w7R4-ZqdlQ_F3NGWkkwKEODllWBQ08bwOFkmV1I0zZdyNnAmU8JHmiz20kuJo0ZbD5MgJqd5Amr9F4Sq9wdS71Bc--DdgGv5nLs29aL14EPW8uY1cWmzimNaA9DuX776dIvisoa6JmejFU5GrZNqDkbeMPVDMCZRHy9sl44sh2E7rKUWsO9nAlXilKTRAkr-Z-J0FEEl92WAGAR7G8eCZKYqS0MmnWHGeemgK9Wpv4RefiUdBbH7o1My89R65FyNO5ZAcAxBR5mhQ44zW263j3RieqAfipWNLVQ71GAgs8AK2nvuT1fim1cQm9ib87X5e60Q1GX4b1d-2TO6Q29pJ2J2WtTPsEqJsCsO8Zp7S8V45i3raHmtHJ4BbX2C1yiwMfvx4-sSCEziCr9hTyi8N9ll-DYJJolJ6HHZwNGg7YttaYyRvM1mZWp-e00MIQ4MXYbZdmwhgkOscp05IJExrxCRLidITxCJP7A3_UuQfgw_BVcBOr9M_UU-GaYHFMRsbTrnkT9772UgsFMZI21OZFoX1ItlCwSqRC70ZB9NrZkLAfL5fxU1bXqoKelnm8Gu8ebKfb3lmJb74_tYL-aLldGM6hWioPxeKqGA74_Pd_5dxdIztmunw7-jKB0-TUt0a_nMAIvly0~2?action-id=11 HTTP/1.1Host: yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yastatic.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065841_13f1386b974cdbfcc4c9501900de99e599f8bc2111b5b501140a9823649ed09a&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003721%3Aet%3A1704065841%3Ac%3A1%3Arn%3A1023762605%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065841%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(113700)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://faq-kak.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065836%3Ac%3A1%3Arn%3A801238757%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1159%2C65%2C3%2C0%2C%2C2964%2C41%2C%2C%2C%2C4217%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065831950%3Afp%3A4254%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065836%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065833_71ad6d1aad595bd3d11a412502e87d5dbb0a3290c9dc2bb59aa35d8426772947&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065837%3Ac%3A1%3Arn%3A223604385%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065837%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(20900)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065837%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvT
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1)gdpr(14) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003720%3Aet%3A1704065840%3Ac%3A1%3Arn%3A330016578%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065840%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(83400)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7349915/picf4e592cdee91c5b36a717d02b21ce7a6/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/tracking/WYWejI_zOoVX2Lb_0TKG08DVUJw4s8S8Un2D7aGP19DlwZ9MURpISMNAJYDpfqm_xf2N-ixOn1CjBIqjBIsT7MS2n3w7R4-ZqdlQ_F3NGWkkwKEODllWBQ08bwOFkmV1I0zZdyNnAmU8JHmiz20kuJo0ZbD5MgJqd5Amr9F4Sq9wdS71Bc--DdgGv5nLs29aL14EPW8uY1cWmzimNaA9DuX776dIvisoa6JmejFU5GrZNqDkbeMPVDMCZRHy9sl44sh2E7rKUWsO9nAlXilKTRAkr-Z-J0FEEl92WAGAR7G8eCZKYqS0MmnWHGeemgK9Wpv4RefiUdBbH7o1My89R65FyNO5ZAcAxBR5mhQ44zW263j3RieqAfipWNLVQ71GAgs8AK2nvuT1fim1cQm9ib87X5e60Q1GX4b1d-2TO6Q29pJ2J2WtTPsEqJsCsO8Zp7S8V45i3raHmtHJ4BbX2C1yiwMfvx4-sSCEziCr9hTyi8N9ll-DYJJolJ6HHZwNGg7YttaYyRvM1mZWp-e00MIQ4MXYbZdmwhgkOscp05IJExrxCRLidITxCJP7A3_UuQfgw_BVcBOr9M_UU-GaYHFMRsbTrnkT9772UgsFMZI21OZFoX1ItlCwSqRC70ZB9NrZkLAfL5fxU1bXqoKelnm8Gu8ebKfb3lmJb74_tYL-aLldGM6hWioPxeKqGA74_Pd_5dxdIztmunw7-jKB0-TUt0a_nMAIvly0~2?action-id=11 HTTP/1.1Host: yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
Source: global traffic	HTTP traffic detected: GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065841_13f1386b974cdbfcc4c9501900de99e599f8bc2111b5b501140a9823649ed09a&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003721%3Aet%3A1704065841%3Ac%3A1%3Arn%3A1023762605%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065841%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(113700)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/405900/pic09bd08e399f3a9b70a18adebb38f6c9b/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/manner-matter.ru?size=120&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/6888053/2a0000018442f6c30046ecd4e432f1af70b7/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7349915/picf4e592cdee91c5b36a717d02b21ce7a6/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event_confirmation HTTP/1.1Host: an.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/5551285/picb27d5ed63233acd4d9256fdcb60995bd/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7706666/pic44be1aa631a26a8b6771e5d77dd0410a/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/405900/pic09bd08e399f3a9b70a18adebb38f6c9b/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon/manner-matter.ru?size=120&stub=2 HTTP/1.1Host: favicon.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9820086/2a0000018846f0fdc4347d85e1104be97e5b/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/6888053/2a0000018442f6c30046ecd4e432f1af70b7/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/964857/pic5371b9e76473c0338bddc27ec895513c/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/5551285/picb27d5ed63233acd4d9256fdcb60995bd/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7706666/pic44be1aa631a26a8b6771e5d77dd0410a/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7709329/pic6745b9a6daae8812b84cbc1308a983be/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://faq-kak.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/9820086/2a0000018846f0fdc4347d85e1104be97e5b/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/964857/pic5371b9e76473c0338bddc27ec895513c/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get-yabs_performance/7709329/pic6745b9a6daae8812b84cbc1308a983be/big HTTP/1.1Host: avatars.mds.yandex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, no-cache, no-store, must-revalidate, max-age=0Connection: CloseContent-Length: 43Content-Type: image/gif; charset=utf-8Date: Sun, 31 Dec 2023 23:36:42 GMTExpires: Sun, 31 Dec 2023 23:36:42 GMTLast-Modified: Sun, 31 Dec 2023 23:36:42 GMTP3P: CP="NOI DEVa TAIa OUR BUS UNI STA"Pragma: no-cacheStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-XSS-Protection: 1; mode=block

Source: chromecache_216.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_146.2.dr, chromecache_213.2.dr	String found in binary or memory: http://schema.org/BreadcrumbList
Source: chromecache_146.2.dr	String found in binary or memory: https://abckeys.ru/kak-otkryt-biblioteku-steam/
Source: chromecache_146.2.dr	String found in binary or memory: https://amxmodmenu.ru/gde-biblioteka-v-stime/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_146.2.dr, chromecache_213.2.dr	String found in binary or memory: https://domrf-lk.ru
Source: chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/#
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/#mobile-menu-toggle
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/#person
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/#webpage
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/#website
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/%d0%ba%d0%be%d0%bd%d1%82%d0%b0%d0%ba%d1%82%d1%8b/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/?s=
Source: chromecache_213.2.dr	String found in binary or memory: https://faq-kak.ru/author/admin/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/category/baza-znaniy/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/comments/feed/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/feed/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-ispravit-nepoladki-s-printerom/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-besedu-kotoruyu-ty-udalil/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-delta-vysotu/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-fragment-v-derevne-czincze/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-korzinu-na-moem-kompyutere/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-panel-vypolnit/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-poteryavshijsya-naushniki-xiaomi/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-shtrih-kod-na-smartfone/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-ssylku-na-uchebnik/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-svoi-dannye-v-pfr/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#richSnippet
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#webpage
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/feed/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-svoyu-pochtu-v-instagrame/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-tech-v-perekrytii/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/kak-najti-vodoem-v-lesu/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-sostavit-pitanie-5-raz-v-den/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-sostavit-plan-privlecheniya-kreditov/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kak-sostavit-strukturu-dlya-studentov/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/kod-oshibki-0xc000000e9-windows-10-kak-ispravit-na-kompyutere/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/nevernyj-kod-mmi-na-androide-kak-ispravit/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/o-sayte/
Source: chromecache_213.2.dr	String found in binary or memory: https://faq-kak.ru/o-sayte/#richSnippet
Source: chromecache_213.2.dr	String found in binary or memory: https://faq-kak.ru/o-sayte/#webpage
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/page/2/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/page/21317/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/page/3/
Source: chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/page/4/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/politika-cookies/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/politika-konfidentsialnosti/
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/pravoobladatelyam/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/wp-comments-post.php
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/akismet/_inc/akismet-frontend.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/css/styles.css
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/js/index.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/swv/js/index.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/assets/js/ads.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.bu
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/rocket-lazy-load/assets/js/16.1/lazyload.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/contactFormSeven.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/frontend.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/css/style.min.css
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/ow-slider.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-top.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/select.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/theme.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/uploads/2023/05/article-placeholder-300x169.jpg
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/uploads/2023/05/article-placeholder.jpg
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/uploads/2023/05/cropped-pngwing.com_-180x180.png
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/uploads/2023/05/cropped-pngwing.com_-192x192.png
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/uploads/2023/05/cropped-pngwing.com_-270x270.png
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-content/uploads/2023/05/cropped-pngwing.com_-32x32.png
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-includes/css/dist/block-library/style.min.css
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/wp-includes/js/comment-reply.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-includes/js/imagesloaded.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-includes/js/jquery/jquery-migrate.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-includes/js/jquery/jquery.min.js
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://faq-kak.ru/wp-json/
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-bibliotek
Source: chromecache_213.2.dr	String found in binary or memory: https://faq-kak.ru/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F
Source: chromecache_213.2.dr	String found in binary or memory: https://faq-kak.ru/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&format=xm
Source: chromecache_213.2.dr	String found in binary or memory: https://faq-kak.ru/wp-json/wp/v2/pages/62
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/wp-json/wp/v2/posts/112659
Source: chromecache_146.2.dr	String found in binary or memory: https://faq-kak.ru/xmlrpc.php
Source: chromecache_252.2.dr, chromecache_263.2.dr	String found in binary or memory: https://flickity.metafizzy.co
Source: chromecache_255.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_255.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://iframe-tasks.yandex
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://iframe-toloka.com
Source: chromecache_173.2.dr	String found in binary or memory: https://mc.kinopoisk.ru/sync_cookie_image_check
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: chromecache_146.2.dr	String found in binary or memory: https://mipped.com/uploads/posts/2016-08/1471190922_screenshot_2.png
Source: chromecache_146.2.dr	String found in binary or memory: https://mipped.com/uploads/posts/2016-08/1471190944_screenshot_4.png
Source: chromecache_146.2.dr	String found in binary or memory: https://mipped.com/uploads/posts/2016-08/thumbs/1471190954_screenshot_3.png
Source: chromecache_146.2.dr	String found in binary or memory: https://mipped.com/uploads/posts/2016-08/thumbs/1471190992_screenshot_5.png
Source: chromecache_146.2.dr	String found in binary or memory: https://mipped.com/uploads/posts/2016-08/thumbs/1471191008_screenshot_1.png
Source: chromecache_146.2.dr	String found in binary or memory: https://mipped.com/uploads/posts/2016-08/thumbs/1471191265_luxfon.com_17824.jpg
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://ogp.me/ns#
Source: chromecache_146.2.dr	String found in binary or memory: https://otvet.mail.ru/question/98105738
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://rankmath.com/
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://s3.mds.yandex.net/internal-metrika-betas
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_146.2.dr	String found in binary or memory: https://schema.org/Article
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://schema.org/Brand
Source: chromecache_213.2.dr	String found in binary or memory: https://schema.org/ListItem
Source: chromecache_214.2.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://schema.org/WPFooter
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://schema.org/WPHeader
Source: chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://schema.org/WPSideBar
Source: chromecache_213.2.dr, chromecache_214.2.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_213.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/63cb2f6a94ac814c6239c11dc9745959?s=96&d=mm&r=g
Source: chromecache_146.2.dr	String found in binary or memory: https://steamcommunity.com/discussions/forum/26/530645446322639195/
Source: chromecache_146.2.dr	String found in binary or memory: https://windowsreport.com/cant-find-steam-folder/
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://yandex.com/an/sync_cookie
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://yastatic.net/s3/metrika
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://yastatic.net/s3/metrika/2.1540128042.1/form-selector/button_ru.js
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_212.2.dr, chromecache_236.2.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850

Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.223.108.114:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3608_474610095

Jump to behavior

Source: classification engine

Classification label: mal48.win@28/171@178/74

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=2000,i,4763310102164380363,1880677161690082003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=2000,i,4763310102164380363,1880677161690082003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	100%	Avira URL Cloud	phishing
https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/	1%	Virustotal		Browse

Source	Detection	Scanner	Link
pixel.konnektu.ru	0%	Virustotal	Browse
x01.aidata.io	0%	Virustotal	Browse
acint.net	1%	Virustotal	Browse
eye.targetads.io	0%	Virustotal	Browse
1.cpm.ak-is2.net	0%	Virustotal	Browse
cm.tns-counter.ru	0%	Virustotal	Browse
balancer.bidderstack.com	0%	Virustotal	Browse
px.arcspire.io	0%	Virustotal	Browse
yandex.digital-services.solutions	0%	Virustotal	Browse
rtb-eu-warsaw.intent.ai	0%	Virustotal	Browse
faq-kak.ru	0%	Virustotal	Browse
kimberlite.io	0%	Virustotal	Browse
user-data-us-east.bidswitch.net	0%	Virustotal	Browse
sync.gonet-ads.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/css/styles.css	0%	Avira URL Cloud	safe
https://faq-kak.ru/politika-konfidentsialnosti/	0%	Avira URL Cloud	safe
https://faq-kak.ru/#	0%	Avira URL Cloud	safe
https://faq-kak.ru/kod-oshibki-0xc000000e9-windows-10-kak-ispravit-na-kompyutere/	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&format=xm	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js	0%	Avira URL Cloud	safe
https://faq-kak.ru/author/admin/	0%	Avira URL Cloud	safe
https://faq-kak.ru/kak-sostavit-plan-privlecheniya-kreditov/	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/swv/js/index.js	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.build.css	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-includes/js/comment-reply.min.js	0%	Avira URL Cloud	safe
https://faq-kak.ru/o-sayte/#webpage	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-includes/js/jquery/jquery-migrate.min.js	0%	Avira URL Cloud	safe
https://faq-kak.ru/kak-najti-tech-v-perekrytii/	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/plugins/akismet/_inc/akismet-frontend.js	0%	Avira URL Cloud	safe
https://sync.bumlam.com/?src=yandex2	0%	Avira URL Cloud	safe
https://shopnetic.com/api/rtb/dmp/pixel?partner=yandex&tc=1	0%	Avira URL Cloud	safe
https://mipped.com/uploads/posts/2016-08/thumbs/1471191265_luxfon.com_17824.jpg	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.bu	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js	0%	Avira URL Cloud	safe
https://px.arcspire.io/yndx?id=9d4cd41a-f59d-4815-8a89-9d30806f5389	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js	0%	Avira URL Cloud	safe
https://faq-kak.ru/kak-sostavit-pitanie-5-raz-v-den/	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/plugins/rocket-lazy-load/assets/js/16.1/lazyload.min.js	0%	Avira URL Cloud	safe
https://faq-kak.ru/kak-najti-svoi-dannye-v-pfr/	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/uploads/2023/05/article-placeholder-300x169.jpg	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-top.min.js	0%	Avira URL Cloud	safe
https://eye.targetads.io/sync/yandex/	0%	Avira URL Cloud	safe
https://faq-kak.ru/kak-sostavit-strukturu-dlya-studentov/	0%	Avira URL Cloud	safe
https://faq-kak.ru/pravoobladatelyam/	0%	Avira URL Cloud	safe
https://sync.bumlam.com/?src=yandex2&s_data=CAIQARiO9sesBqIBEHX7ZNSoNRHuhuAAJZDAZHw*	0%	Avira URL Cloud	safe
https://counter.yadro.ru/id127/reff-id.gif?sid=dc9184c219bd4f10a1ea45afbea02ea2	0%	Avira URL Cloud	safe
https://sync.upravel.com/yandex/sync	0%	Avira URL Cloud	safe
https://dm.hybrid.ai/match?id=182	0%	Avira URL Cloud	safe
https://nr.bidderstack.com/yandex/cm?user_id={partner_user_id}	0%	Avira URL Cloud	safe
https://faq-kak.ru/kak-najti-vodoem-v-lesu/	0%	Avira URL Cloud	safe
https://faq-kak.ru/wp-json/wp/v2/pages/62	0%	Avira URL Cloud	safe
https://nr.bidderstack.com/yandex/cm?user_id={partner_user_id}&pupa=1	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
eye.targetads.io	51.250.81.61	true	false	0%, Virustotal, Browse	unknown
rtb-eu-warsaw.intent.ai	172.67.72.191	true	false	0%, Virustotal, Browse	unknown
sync.gonet-ads.com	188.42.105.236	true	false	0%, Virustotal, Browse	unknown
x01.aidata.io	89.108.119.28	true	false	0%, Virustotal, Browse	unknown
1.cpm.ak-is2.net	173.239.59.72	true	false	0%, Virustotal, Browse	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	50.16.134.138	true	false		high
pixel.konnektu.ru	130.193.58.13	true	false	0%, Virustotal, Browse	unknown
na-ice.360yield.com	34.199.149.230	true	false		high
an.yandex.ru	77.88.21.90	true	false		high
profile.ssp.rambler.ru	91.192.149.30	true	false		high
cm.g.doubleclick.net	142.250.113.157	true	false		high
ssp.adriver.ru	81.222.128.216	true	false		high
www.google.com	142.250.115.104	true	false		high
community.akamai.steamstatic.com	23.47.48.97	true	false		high
favicon.yandex.net	213.180.204.36	true	false		high
acint.net	193.3.184.135	true	false	1%, Virustotal, Browse	unknown
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	52.40.168.59	true	false		high
r.mail.ru	95.163.41.56	true	false		high
cm.tns-counter.ru	194.226.130.226	true	false	0%, Virustotal, Browse	unknown
euw-ice.360yield.com	54.229.5.240	true	false		high
balancer.bidderstack.com	94.130.221.58	true	false	0%, Virustotal, Browse	unknown
ads.adfox.ru	77.88.21.179	true	false		high
avatars.mds.yandex.net	87.250.247.183	true	false		high
px.arcspire.io	35.177.4.157	true	false	0%, Virustotal, Browse	unknown
clients.l.google.com	142.251.116.101	true	false		high
yandex.digital-services.solutions	144.126.246.116	true	false	0%, Virustotal, Browse	unknown
user-data-us-east.bidswitch.net	35.211.178.172	true	false	0%, Virustotal, Browse	unknown
faq-kak.ru	86.110.215.66	true	false	0%, Virustotal, Browse	unknown
mc.yandex.ru	87.250.251.119	true	false		high
dr.yandex.net	93.158.134.242	true	false		high
kimberlite.io	217.199.220.44	true	false	0%, Virustotal, Browse	unknown
mitdmp.whiteboxdigital.ru	81.163.17.245	true	false		unknown
shopnetic.com	77.244.216.90	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
dsp.mpartner.digital	84.38.189.44	true	false		unknown
sm.rtb.mts.ru	217.66.147.35	true	false		high
tech.rtb.mts.ru	213.87.44.187	true	false		high
ssp-rtb.sape.ru	193.3.184.217	true	false		high
counter.yadro.ru	88.212.202.52	true	false		unknown
sync.bumlam.com	31.172.81.160	true	false		unknown
yastatic.net	178.154.131.216	true	false		high
ssp.ads.betweendigital.com	172.240.127.131	true	false		high
yandex.ru	5.255.255.77	true	false		high
accounts.google.com	142.250.115.84	true	false		high
sonar.semantiqo.com	95.217.109.66	true	false		unknown
im.bluevoox.com	52.45.175.185	true	false		unknown
dm.hybrid.ai	37.230.131.16	true	false		unknown
s.uuidksinc.net	31.220.27.135	true	false		high
cr.frontend.weborama.fr	34.111.129.221	true	false		high
dmg.digitaltarget.ru	185.15.175.145	true	false		unknown
vma.mts.ru	217.66.147.40	true	false		high
outspot2-ams.adx.opera.com	82.145.213.8	true	false		high
prod-hzeu-lba.upravel.com	213.239.194.43	true	false		unknown
match.new-programmatic.com	217.65.2.150	true	false		unknown
pug-sfo-bc.pubmnet.com	104.36.113.107	true	false		unknown
sync.upravel.com	unknown	unknown	false		unknown
avatars.akamai.steamstatic.com	unknown	unknown	false		high
ad.mail.ru	unknown	unknown	false		high
yandex-sync.rutarget.ru	unknown	unknown	false		unknown
clients2.google.com	unknown	unknown	false		high
nr.bidderstack.com	unknown	unknown	false		unknown
px.adhigh.net	unknown	unknown	false		high
mc.yandex.com	unknown	unknown	false		high
exchange.buzzoola.com	unknown	unknown	false		high
simage2.pubmatic.com	unknown	unknown	false		high
t.adx.opera.com	unknown	unknown	false		high
sync.dmp.otm-r.com	unknown	unknown	false		unknown
ads.betweendigital.com	unknown	unknown	false		high
dpm.demdex.net	unknown	unknown	false		high
ysa-static.passport.yandex.ru	unknown	unknown	false		high
x.bidswitch.net	unknown	unknown	false		unknown
sync.adkernel.com	unknown	unknown	false		high
yandex-dmp-sync.rutarget.ru	unknown	unknown	false		unknown
match.360yield.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/css/styles.css	false	Avira URL Cloud: safe	unknown
https://yandex.ru/an/mapuid/minimobww/	false		high
https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0	false	Avira URL Cloud: safe	unknown
https://an.yandex.ru/mapuid/mediascope/a25f35e32967d40c7ae0771106d89ad4ab87cb48a590cf065de50fb836997afa	false		high
https://yastatic.net/partner-code-bundles/937691/ae84bbbd1296b7622b03.js	false		high
https://avatars.mds.yandex.net/get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/big	false		high
https://shopnetic.com/api/rtb/dmp/pixel?partner=yandex&tc=1	false	Avira URL Cloud: safe	unknown
https://yandex.ru/an/mapuid/google/?partner-tag=yandexru	false		high
https://mc.yandex.com/watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003720%3Aet%3A1704065840%3Ac%3A1%3Arn%3A330016578%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065840%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(83400)aw(1)rcm(0)ecs(0)ti(1)	false		high
https://mc.yandex.com/watch/95527089/1?page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065830_fd706684ca2d1a0b1e9f543f9811d9d4df0dbd2457b79def74d80cd18b0be523&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003710%3Aet%3A1704065830%3Ac%3A1%3Arn%3A925768434%3Arqn%3A7%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C273%2C%2C%2C%2C102%2C3%2C2639%2C2639%2C1%2C2392%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065826699%3Afp%3A2138%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065830&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%228664901704065829155%22%7D%7D	false		high
https://yandex.ru/an/mapuid/adobedmp/	false		high
https://avatars.mds.yandex.net/get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/x180	false		high
https://mc.yandex.com/watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065836%3Ac%3A1%3Arn%3A801238757%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1159%2C65%2C3%2C0%2C%2C2964%2C41%2C%2C%2C%2C4217%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065831950%3Afp%3A4254%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065836%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1)	false		high
https://an.yandex.ru/mapuid/adsniperis/75fb64d4-a835-11ee-86e0-002590c0647c	false		high
https://exchange.buzzoola.com/cookiesync/redirect/yandex?redirect_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbuzzooladspis%2F%24%7BUUID%7D	false		high
https://an.yandex.ru/mapuid/sapeis/0100007F00FB9165E53A996D0219B2B3	false		high
https://an.yandex.ru/mapuid/upravelis/bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c	false		high
https://faq-kak.ru/wp-includes/js/jquery/jquery-migrate.min.js	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/swv/js/index.js	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/sync_cookie_image_decide?token=10234.aUB3SqFXQihpV7u28KLmxTeuijO6AILiIGSmXB45GAmCA-XNN_aZ3BsS_WV9BFXEXcMi7wmyeblU8qtwS-FZj0MkgvXA4Qk_5OI8GDbVDq4cjs3HtAI8NG8YU0jZpZKsmuUtntd01uER4IpUIIbN4fUDZtK8LWl3RrBdwj7a9iOC8vJbKIpipFfqyZeRXA9Wr6kZKhssIdUzDHA-lArJPQTqlEdEzRmVWQ_JY3zD2Bg%2C.uciNXaA1uFCPKE6sbyPqFUdf9oo%2C	false		high
https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.build.css	false	Avira URL Cloud: safe	unknown
https://avatars.mds.yandex.net/get-direct/5146926/ET8mENn2OZUHkOQLCeV7_w/x180	false		high
https://faq-kak.ru/wp-includes/js/comment-reply.min.js	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js	false	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/metrika/tag.js	false		high
https://an.yandex.ru/mapuid/azerionis/72cd074f-1f56-429d-956b-4f5c3854b25f	false		high
https://an.yandex.ru/mapuid/part_id/11732138183223988288	false		high
https://mc.yandex.com/watch/3797907/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A219434223%3Arqn%3A3%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C566%2C1934%2C553%2C3%2C0%2C%2C1274%2C6%2C5098%2C5098%2C1%2C4356%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Afp%3A2678%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065828&t=mc(p-2-h-1)clc(0-0-0)rqnt(1)lt(71300)aw(0)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%222757811704065824348%22%7D%7D	false		high
https://mc.yandex.com/watch/95527089/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065788_fa54d8960a9d26439f5af1c19556edcaf70a643ffa0b4031d304b9aba8a0ad31&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003629%3Aet%3A1704065789%3Ac%3A1%3Arn%3A1064215716%3Arqn%3A2%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065791&t=gdpr(14%2C14)mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(158700)aw(1)rcm(1)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%229673481704065783203%22%7D%7D	false		high
https://faq-kak.ru/wp-content/plugins/akismet/_inc/akismet-frontend.js	false	Avira URL Cloud: safe	unknown
https://euw-ice.360yield.com/ul_cb/server_match?partner_id=N&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fazerionis%2F%7BPUB_USER_ID%7D	false		high
https://an.yandex.ru/mapuid/ramblerssp/	false		high
https://sync.bumlam.com/?src=yandex2	false	Avira URL Cloud: safe	unknown
https://avatars.mds.yandex.net/get-yabs_performance/10426767/2a00000188a2f2f3429a0ae4264045d573d6/big	false		high
https://tech.rtb.mts.ru/?dsp_uid=e27c7e98-47aa-4e02-bd89-b573f3e9f025&return_url=https%3A%2F%2Fpixel.konnektu.ru%2Fredirect%2Fmts%3Fcallback_url%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D1%2526ssp%253Dkonnektu%2526id%253D%257BUSER_ID%257D	false		high
https://px.arcspire.io/yndx?id=9d4cd41a-f59d-4815-8a89-9d30806f5389	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)gdpr(14)ti(1)	false		high
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js	false	Avira URL Cloud: safe	unknown
https://favicon.yandex.net/favicon/manner-matter.ru?size=120&stub=2	false		high
https://mc.yandex.com/watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A228187864810%3Ahid%3A794577329%3Az%3A60%3Ai%3A20240101003650%3Aet%3A1704065810%3Ac%3A1%3Arn%3A103385644%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Ast%3A1704065810&t=clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1)	false		high
https://avatars.mds.yandex.net/get-yabs_performance/7709329/pic6745b9a6daae8812b84cbc1308a983be/big	false		high
https://yandex.ru/an/mapuid/operacom/	false		high
https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/wp-content/plugins/rocket-lazy-load/assets/js/16.1/lazyload.min.js	false	Avira URL Cloud: safe	unknown
https://an.yandex.ru/mapuid/getintentis/78eEqA8RIBw.AikABlGMwjyiow	false		high
https://avatars.mds.yandex.net/get-yabs_performance/6888053/2a0000018442f6c30046ecd4e432f1af70b7/big	false		high
https://yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2	false		high
https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-top.min.js	false	Avira URL Cloud: safe	unknown
https://eye.targetads.io/sync/yandex/	false	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10234.s_UndBrRNMbNh5NrRcZ18nWf5mqJQwnxjsR9f_0qriXcYT6deia5YMKkVtsiEbeR.D3vICVDUgqF8gTKSQ2FMw1Namwc%2C	false		high
https://an.yandex.ru/mapuid/gonetisnew/NDZlYTdiZjNhZTRmNGQ3Nw	false		high
https://yastatic.net/partner-code-bundles/937691/a92bedce4b45bc60c7b9.js	false		high
https://sync.bumlam.com/?src=yandex2&s_data=CAIQARiO9sesBqIBEHX7ZNSoNRHuhuAAJZDAZHw*	false	Avira URL Cloud: safe	unknown
https://yandex.ru/an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=26&viewability-undetermined=0	false		high
https://yandex.ru/an/mapuid/yeahmobissp/	false		high
https://counter.yadro.ru/id127/reff-id.gif?sid=dc9184c219bd4f10a1ea45afbea02ea2	false	Avira URL Cloud: safe	unknown
https://avatars.mds.yandex.net/get-yabs_performance/9710187/2a00000188a054ad11eb06c35a3e0c2ff733/huge	false		high
https://avatars.mds.yandex.net/get-yabs_performance/10314704/2a00000188a2f48cb87880501f5b2085a288/big	false		high
https://ads.betweendigital.com/match?bidder_id=43554&callback_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbetweendigitalis%2F%24%7BUSER_ID%7D	false		high
https://favicon.yandex.net/favicon/manner-matter.ru?size=32&stub=2	false		high
https://an.yandex.ru/mapuid/targetrtbis/	false		high
https://sync.upravel.com/yandex/sync	false	Avira URL Cloud: safe	unknown
https://yastatic.net/partner-code-bundles/937691/d053ed1897419218e52b.js	false		high
https://nr.bidderstack.com/yandex/cm?user_id={partner_user_id}	false	Avira URL Cloud: safe	unknown
https://yastatic.net/partner-code-bundles/937691/4c9a181cc3ad10f671b2.js	false		high
https://vma.mts.ru/match/second?ssp=55	false		high
https://ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=109	false		high
https://dm.hybrid.ai/match?id=182	false	Avira URL Cloud: safe	unknown
https://nr.bidderstack.com/yandex/cm?user_id={partner_user_id}&pupa=1	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://faq-kak.ru/#	chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://ogp.me/ns#	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false		high
https://faq-kak.ru/kak-sostavit-plan-privlecheniya-kreditov/	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/kod-oshibki-0xc000000e9-windows-10-kak-ispravit-na-kompyutere/	chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.gravatar.com/avatar/63cb2f6a94ac814c6239c11dc9745959?s=96&d=mm&r=g	chromecache_213.2.dr	false		high
https://faq-kak.ru/author/admin/	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/politika-konfidentsialnosti/	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_255.2.dr	false		high
https://faq-kak.ru/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&format=xm	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WPSideBar	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false		high
https://faq-kak.ru/o-sayte/#webpage	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://s3.mds.yandex.net/internal-metrika-betas	chromecache_212.2.dr, chromecache_236.2.dr	false		high
https://yastatic.net/s3/metrika	chromecache_212.2.dr, chromecache_236.2.dr	false		high
https://faq-kak.ru/kak-najti-tech-v-perekrytii/	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/Article	chromecache_146.2.dr	false		high
https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.bu	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://yastatic.net/s3/metrika/2.1540128042.1/form-selector/button_ru.js	chromecache_212.2.dr, chromecache_236.2.dr	false		high
https://mipped.com/uploads/posts/2016-08/thumbs/1471191265_luxfon.com_17824.jpg	chromecache_146.2.dr	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/kak-sostavit-pitanie-5-raz-v-den/	chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false		high
https://schema.org/ListItem	chromecache_213.2.dr	false		high
https://faq-kak.ru/kak-najti-svoi-dannye-v-pfr/	chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/wp-content/uploads/2023/05/article-placeholder-300x169.jpg	chromecache_146.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WPHeader	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false		high
https://faq-kak.ru/kak-sostavit-strukturu-dlya-studentov/	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/pravoobladatelyam/	chromecache_146.2.dr, chromecache_213.2.dr, chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
http://schema.org/BreadcrumbList	chromecache_146.2.dr, chromecache_213.2.dr	false		high
https://faq-kak.ru/kak-najti-vodoem-v-lesu/	chromecache_146.2.dr	false	Avira URL Cloud: safe	unknown
https://faq-kak.ru/wp-json/wp/v2/pages/62	chromecache_213.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license/free	chromecache_255.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
188.42.105.236	sync.gonet-ads.com	Luxembourg	58909	ISSPL-INIBEESoftwareSolutionsPvtLtdIN	false
176.9.79.218	unknown	Germany	24940	HETZNER-ASDE	false
95.217.109.66	sonar.semantiqo.com	Germany	24940	HETZNER-ASDE	false
213.87.44.187	tech.rtb.mts.ru	Russian Federation	13174	MTSNETMoscowRussiaRU	false
51.250.81.61	eye.targetads.io	United Kingdom	2686	ATGS-MMD-ASUS	false
31.172.81.160	sync.bumlam.com	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
217.199.220.44	kimberlite.io	Russian Federation	31430	TEL-NET-ASRU	false
185.15.175.145	dmg.digitaltarget.ru	Russian Federation	43226	SAFEDATAUplinksRU	false
35.211.178.172	user-data-us-east.bidswitch.net	United States	19527	GOOGLE-2US	false
142.250.115.104	www.google.com	United States	15169	GOOGLEUS	false
93.158.134.119	unknown	Russian Federation	13238	YANDEXRU	false
213.180.204.36	favicon.yandex.net	Russian Federation	13238	YANDEXRU	false
31.220.27.135	s.uuidksinc.net	Netherlands	39572	ADVANCEDHOSTERS-ASNL	false
193.232.150.149	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
87.250.251.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
130.193.58.13	pixel.konnektu.ru	Russian Federation	200350	YANDEXCLOUDRU	false
35.177.4.157	px.arcspire.io	United States	16509	AMAZON-02US	false
84.38.189.44	dsp.mpartner.digital	Russian Federation	49505	SELECTELRU	false
50.16.134.138	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
95.163.41.56	r.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
23.47.52.50	unknown	United States	16625	AKAMAI-ASUS	false
213.239.194.43	prod-hzeu-lba.upravel.com	Germany	24940	HETZNER-ASDE	false
77.88.21.90	an.yandex.ru	Russian Federation	13238	YANDEXRU	false
173.239.59.72	1.cpm.ak-is2.net	United States	20264	WEBAIR-INTERNET-2US	false
52.45.175.185	im.bluevoox.com	United States	14618	AMAZON-AESUS	false
87.250.250.90	unknown	Russian Federation	13238	YANDEXRU	false
91.192.149.30	profile.ssp.rambler.ru	Russian Federation	42481	BEGUN-ASRU	false
87.250.247.182	unknown	Russian Federation	13238	YANDEXRU	false
52.40.168.59	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
87.250.247.183	avatars.mds.yandex.net	Russian Federation	13238	YANDEXRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
88.212.202.52	counter.yadro.ru	Russian Federation	39134	UNITEDNETRU	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
54.229.5.240	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
217.66.147.35	sm.rtb.mts.ru	Russian Federation	29209	SPBMTS-ASMalayaMonetnayaStreet2-ARU	false
45.9.24.193	unknown	Russian Federation	210053	R5IT-ASRU	false
172.240.127.131	ssp.ads.betweendigital.com	United States	7979	SERVERS-COMUS	false
34.199.149.230	na-ice.360yield.com	United States	14618	AMAZON-AESUS	false
93.158.134.242	dr.yandex.net	Russian Federation	13238	YANDEXRU	false
217.65.2.150	match.new-programmatic.com	Russian Federation	3175	CITYTELECOM-MSKRU	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
142.251.116.101	clients.l.google.com	United States	15169	GOOGLEUS	false
213.180.204.90	unknown	Russian Federation	13238	YANDEXRU	false
217.66.147.40	vma.mts.ru	Russian Federation	29209	SPBMTS-ASMalayaMonetnayaStreet2-ARU	false
5.255.255.77	yandex.ru	Russian Federation	13238	YANDEXRU	false
81.222.128.216	ssp.adriver.ru	Russian Federation	20597	ELTEL-ASRU	false
142.250.115.84	accounts.google.com	United States	15169	GOOGLEUS	false
178.154.131.216	yastatic.net	Russian Federation	13238	YANDEXRU	false
142.250.114.155	unknown	United States	15169	GOOGLEUS	false
194.55.244.185	unknown	unknown	34959	KVIKTEL_LLCRU	false
142.250.113.157	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
94.130.221.58	balancer.bidderstack.com	Germany	24940	HETZNER-ASDE	false
194.226.130.226	cm.tns-counter.ru	Russian Federation	52016	TNSMSK-RU	false
172.67.72.191	rtb-eu-warsaw.intent.ai	United States	13335	CLOUDFLARENETUS	false
37.230.131.16	dm.hybrid.ai	Netherlands	9009	M247GB	false
34.232.60.164	unknown	United States	14618	AMAZON-AESUS	false
5.255.255.70	unknown	Russian Federation	13238	YANDEXRU	false
89.108.119.28	x01.aidata.io	Russian Federation	43146	AGAVA3RU	false
104.36.113.107	pug-sfo-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
23.47.48.97	community.akamai.steamstatic.com	United States	16625	AKAMAI-ASUS	false
34.111.129.221	cr.frontend.weborama.fr	United States	15169	GOOGLEUS	false
31.172.81.172	unknown	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
86.110.215.66	faq-kak.ru	Russian Federation	35374	RC-ASRU	false
104.26.14.69	unknown	United States	13335	CLOUDFLARENETUS	false
81.163.17.245	mitdmp.whiteboxdigital.ru	Russian Federation	58303	IR-RASANAPISHTAZIR	false
77.88.21.179	ads.adfox.ru	Russian Federation	13238	YANDEXRU	false
193.3.184.217	ssp-rtb.sape.ru	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
77.88.21.36	unknown	Russian Federation	13238	YANDEXRU	false
77.244.216.90	shopnetic.com	Russian Federation	49505	SELECTELRU	false
193.3.184.135	acint.net	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
96.46.186.61	unknown	United States	7979	SERVERS-COMUS	false
144.126.246.116	yandex.digital-services.solutions	United States	36413	LOYOLAUS	false
77.88.55.60	unknown	Russian Federation	13238	YANDEXRU	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1368435
Start date and time:	2024-01-01 00:35:19 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@28/171@178/74
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/#main Browse: https://faq-kak.ru/ Browse: https://faq-kak.ru/o-sayte/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.113.94, 34.104.35.123, 142.250.113.95, 142.250.115.95, 142.250.114.95, 142.251.116.95, 23.47.52.58, 23.47.52.48, 20.12.23.50, 72.21.81.240, 192.229.211.108, 20.166.126.56, 13.85.23.206, 40.127.169.103, 13.85.23.86
Excluded domains from analysis (whitelisted): fs.microsoft.com, content-autofill.googleapis.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, a1688.dscb.akamai.net, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, avatars.akamai.steamstatic.com.edgesuite.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3271
Entropy (8bit):	7.903764332912642
Encrypted:	false
SSDEEP:	96:ErIKpLWrbt9EfU86XwKg8La9+llZkveeKA:Eruvt9EM8wLaclYKA
MD5:	2B060BDC7E69B78132F7F3419E48780B
SHA1:	511D76DD1F8E3731C23744177E70442BE3070B44
SHA-256:	B33867FB7BC131AC4D1B82C02F97202DCA41BFB4C20949369F6AB24C67284E1B
SHA-512:	02355D394880306775CBA35B70A511486EEBE63299E9D93639435CEF3DE575F4CA6901CA970F21888E71B9DFE84002B55E24DB83E8DABA43B6C964B4B3932AC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx...A.. ...A....\|...9m....#...F0..,...F0...`..F0....m.#.....`.#.....`.#..I>7g.j^.E.E...%0.A.Q...0..).H.`.LD......(..[......{og...k..........SMi......\e<...........Z...~.j...t..z.F.RQ.K&.X.V.x..<._..8..c6..~...j.t:..h\|l...,...:..yh6.....^....(]_&...vC......y.."......\...H$..b.....;2M..\|.....\......\.?J.y.G.y.X...\...{._y.....~?..>..6.. D.u........aXZ.B.....D".f..L,.....i.n.x>...X.{i..2..`....../.KE.QL&.~c.[...e.8.!o4.!....oyL(..N..<&y:..>K.R.D.....x.@ ........C.^g.i.......(....b...+@@A....'.!J(. x."E^.L.....u.......2]..k.}.9.h...z..B...b1#i.P....#..3.[.F......Mc}.../..c0...... .o......S.x%s)t:...\|BB2..li..r.x<....MK..L.%..%.....R...e........{<.T.U.j5D"..`.Za.X.6...D&.A..W.......R..f...zJ\|..?3./.....X..k...s...1..!......6..v....\|..P2...`4...X,..d"....4.........z.H$.h6...../?............v.Q.....W.c2v..O>..r..N..@ .+p.e}....R...j.e....3.,...^...n.j.m.q:.0....Z3.P/...@.....7IA(.*...... ..$...T)..D....T....s..........

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	8460
Entropy (8bit):	7.933983801596035
Encrypted:	false
SSDEEP:	192:ZS3zeRkNnH68+gecHY4DwxHjUXh6vcGhU2lSOZR+0aQre2:ZdRYnH7+MHZ81h5TZx
MD5:	9755ED79486747D964F75A2C85E4CE11
SHA1:	030E3CF71DCC68B096D5C53AF4FEF0CEB67C0F13
SHA-256:	D4A3760D19B034EA50F02FF1402DABECA526D12B06B2A9CB2C30DF1BC71941FB
SHA-512:	FFFCF32D9173D714376C27DC7BE3E3083CB1E8A6AED0DB617B7F0E380FD76F513645D0AB7CB8DBC9174D799DAD9F880558EDCF7DC1F197726D2661A025D420CC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C............................................................................"........................................J.......................!...1A."Qa.#2q...B.....$Rr..3Cb..%4s...STc......................................).......................!.1.Aa..Qq..."..............?..<8. c....$m.Jl...{...L.......{........F..Pi.p..2G.z.]...R..L.j..il....K.=.h[.]...`h"6u.G6.F.b.x.].R.. ....{...\|.......1..5+r...8\K........../.-na... ...."..T.3o...)....n2..!.T+.y;..GrL..".......s.:..<#.T.>U....^..cy7.G.=.sV.3g...>..U....4.S~5&F.Y...sL./.pZ.,..ZBR}Y..I..z..N..V.H..D..5."."..d.--...o.....D..&.#._....?.../....X..j.....M.r..#..o....C.9T"6U.?.W.r.../.P.1...f.[..q......>...?..P.>'..g...x....?J..s.?...$q...._.u.yv...V.p....~....}].....X...R..r......-.\|.J....~_...;I.\.......=.K..YP=..q..5...aX.B.S.H.y........'...Z.[>C.....&.Z.9.H.3..=..h.J......._...b.m.c.....t...H)....vG..E...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33703), with no line terminators
Category:	downloaded
Size (bytes):	33703
Entropy (8bit):	5.203466046638291
Encrypted:	false
SSDEEP:	768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad
MD5:	2435549EAC66915D7464EE7B9EFCE038
SHA1:	E390598FB192583622A8EA079D5C96DFFDB34FB5
SHA-256:	34806EF573086241DD1A596A860B0295B51C24F1C37EAB36EB9D0665683ABB55
SHA-512:	42A25F058316E5E947BA3149B56C81FD0E82F21D4B8109EF4FC529509D54235A0C0D7DD6212E381129B46CA72D81C4AE9E58CFAE87557587727BF290FA1F3F09
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/safeframe-bundles/0.83/host.js
Preview:	!function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="https://yastatic.net/safeframe-bundles/",o(o.s=62)}([function(e,t,o){"use strict";t.__esModule=!0,t.c

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://shopnetic.com/api/rtb/dmp/pixel?partner=yandex&tc=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2002), with no line terminators
Category:	downloaded
Size (bytes):	2002
Entropy (8bit):	5.197638454667721
Encrypted:	false
SSDEEP:	48:N7UP/0tmF1vevAdu2MUe63CKZegt/4+zkGbi2urn:N+cw32Yiv6JZQLrn
MD5:	3F249575B37232D51921E82536004592
SHA1:	5799B78581ED5968346CADE85389B82B2D6A304D
SHA-256:	B817C9B9BB557B34222C4598548F3569A7C8F2BB30B796A6C92D47DD740E4271
SHA-512:	63DB83F3E2126724BBC68A12F3BDED2B8F0EEAE4216CE21C94F8774AA2F4A507AB097910937E5F541298EC7A01AD2F5ECA36ADEDAB07CA967706CC501E0D55B4
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/ow-slider.min.js
Preview:	!function n(o,i,l){function a(t,e){if(!i[t]){if(!o[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(u)return u(t,!0);throw(r=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",r}r=i[t]={exports:{}},o[t][0].call(r.exports,function(e){return a(o[t][1][e]\|\|e)},r,r.exports,n,o,i,l)}return i[t].exports}for(var u="function"==typeof require&&require,e=0;e<l.length;e++)a(l[e]);return a}({1:[function(e,t,r){"use strict";var n=e("@babel/runtime/helpers/interopRequireDefault"),o=n(e("@babel/runtime/helpers/classCallCheck")),i=n(e("@babel/runtime/helpers/defineProperty")),e=function e(){var r=this;(0,o.default)(this,e),(0,i.default)(this,"flickity",void 0),(0,i.default)(this,"start",function(){var e=0<arguments.length&&void 0!==arguments[0]?arguments[0]:document.querySelectorAll(".gallery-format, .product-entry-slider");r.flickity=[],null!=e&&e.forEach(function(e){var t=new Flickity(e,{autoPlay:!e.classList.contains("woo-entry-image")&&6e3,rightToLeft:!!docume

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 267x150, components 3
Category:	dropped
Size (bytes):	13093
Entropy (8bit):	7.9578447554031575
Encrypted:	false
SSDEEP:	192:ARloPvim2QHXP+ruRN4v9TQtlFnEEOs3s16RKnRlI8ZgZ2yQf:AREvi6W+4v9sTqEEnRlIUgZ2df
MD5:	E37BCAB5DB2DDCFF3AF9E9B9805DEBA5
SHA1:	E3142618545E51ECA890E9F82CFB1095B5B015DF
SHA-256:	FB3E27C0B35D52121B27B61215E055FA7E2A19A3785F96ADF04D3BB06C7C8BA8
SHA-512:	1C3AA4473C4F2D67443DA3554752B46FE96F62A30BF2A186B7EAEB3E8D01AFBE4868AD5C6E55EDD818A9203424FE4DCF272847EF43388EF896665C575B42CFCC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".........................................I.........................!.1A.."Qa.2q...B...#3Rb..$CSr.....&cs.%6Dt...................................8........................!1..AQ.aq....."2R.....Bb.#...............?........M.?.kasG.^.D.H..?z..z.}7$...\....Q..>.........M>u.Wt..+>u....'......?....h..=. .......jf...@Q.m!N.ph<.:s.cds..!......b..b<..3./9..O.YU$Ye^T...................W.W...P.EE.....z=...!h.....7l..S...<)Bz.J.?..HD..!,2.J..I.I.....o.V.....P.y...S.<.).+0.\s.A.(.I.p.njKw]BQ....Y....pt.>#...$...._..\'..<.Bo.fcq.n-....p..3...!.......M4......<....E.....E5f..]g-...%K.B.....P.[.3g.-.....%...?..X.sFC..d....+S.I9.?..@5....*.........A.... n6.^.....H.6s.sQ.W8....[...FT...7<Y.g...Z..}~k...6.tK....7..!<)..v.7$..{d....O.U.....L.s...eEWz....S.$'...$...N....2....Y..#...h.9.]...O.!...Py.p<G..

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ssp.adriver.ru/cgi-bin/sync.cgi?dsp_id=109
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60313)
Category:	downloaded
Size (bytes):	60346
Entropy (8bit):	5.369734210746259
Encrypted:	false
SSDEEP:	768:Y4DxpCiCqCjPKSyJTfATC1CHRDcQfFYFGCxVQu4zC/BcIcZpCy/:pDxBT4TCQfueOBXcbp
MD5:	890BCAE54284EA3543503D644D6F28BC
SHA1:	324A850685E4140D8F172FA7A4BB6C1D5CF8EF46
SHA-256:	C5C850074A6028D74F3E9165024B599BEF1D198D41CD69332583BFDEDB65D2E7
SHA-512:	A8E3E756E8FB70359B11F9D9872AF7E1E9D1152ACDD3505D48E5B82B18AC5C3FF65D25A4E133A24B4B4D921941183CA5BB42502F913E19F3F8C83BF4BBCD181D
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/937691/d053ed1897419218e52b.js
Preview:	/! v:937691 b:default c:9421 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let r=this;return function(...n){return r.apply(e,[...t,...n])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,r=Object(this),n=r.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<n&&!(o in r);)o++;if(o>=n)throw new TypeError("Reduce of empty array with no initial value");t=r[o++]}for(;o<n;o++)o in r&&(t

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	640
Entropy (8bit):	7.551207837475733
Encrypted:	false
SSDEEP:	12:6v/7i1qU8efyfhVHVM/1BOpViClNnRXl2g01I1SBZyf/LciDjGD+RTXp98sf8/Wj:HqUjfgrifCnhl2g01hcfIiDjqi598+84
MD5:	12C22C4D76887C60D988FCC9185E6C18
SHA1:	84475AE6BFB0B3B8047F0CF79D3087609A7C2635
SHA-256:	65361756FBEEB484699E581DCE37C9174737DC4F6CC3E9F976DBD44693EE40D7
SHA-512:	9037F95011691C365BAAD9CEC6A198CAA235469B6A8A66DE07DB7A768CE3D6C0F9AFE9ADD0EE2ABF102B4598D432833593469184D477FE350CB0ECF2829FD114
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/solargameprotect.com?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz....GIDATx..5p.a...=Y.V_./.]..03s...1....l.ah..Q_.Q.....X......7._.'g.D.!g...z......$...3HBL.....o..o..!..9.r.I.....A.\|1i......N.e........(.Cl.....x.N._ .......c...kw.6.S..]\|..k....`.NJ..(.1."c.Hk.3.Ty.;q.....\..7.L.Z<..b...}..z....=Y..(5.w ......Wo.A..;Q..g.a.P....A.hB!.......<T.D....(D......zD]A.H-L.5.." .1..K....\.....B...`.\..p.]@.9rh?.>..2<:.Y.420.L25.'...oM.I\U.k-....R.....'I.rB...).Qmq.Vj+../VMq"..yB............~..$...T+.+*.5.v.n.d..8z.7TR.........u.gv.7VB..F.sAo...e....r..vb.l.c...7...N.<......m..v.+1.p..?....C..0.1Ee:......w.s..........9.B.W.c)....IEND.B`.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1248
Entropy (8bit):	7.500085429482198
Encrypted:	false
SSDEEP:	24:Bw0o0XxDuLHeOWXG4OZ7DAJuLHenX3pwVviGvtZQWnnEvcoll88:BwFuERAol/vtPEv588
MD5:	6BD0E7B14504D7EDF771237A39E1B157
SHA1:	8FC55C7F75B8D89027E06D9097B3FB7179026A0C
SHA-256:	183F05FE2869B9D33F5B5326B64D13443708F33A5515F93BCB89EE1770D529FA
SHA-512:	2CDC58808A20F7E37C7AFAA0A3B8D6844BD0A2D61954D8C71D7103E1B0F36D9FD6E0FD5BBDB0F77FB28FDEB2484699C6B8153DCD2F2DE899E82931336EE942DA
Malicious:	false
Reputation:	low
URL:	https://avatars.akamai.steamstatic.com/8fc55c7f75b8d89027e06d9097b3fb7179026a0c.jpg
Preview:	......JFIF.....d.d.....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..R...."..y.....Z.Y...<.0.!N7d..W.i~......h..5T.........k..J-.]...3..\?..H..x.D.4.vi^i... .O.....+.\|9..\|#..../.5...f..f.e.Q..g.1..Q.Wr....^.:..IF.........8........O4....Ht.e.....H.........VTb0.1.j. .^Q..j.h..X..[h..6^}...d....s...5.R..m..r]Y..z....W..$ F.h.TM.....5..SE.5..o.kwz.......L.y..'u,.P....W..9..?..y..W=9.O..$.]~_..M.....}..F.yo..........-.....UQ..\|..>

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 267x150, components 3
Category:	dropped
Size (bytes):	13575
Entropy (8bit):	7.969634658717251
Encrypted:	false
SSDEEP:	384:PUjCrFCWIQ9LtkZTbCg/+JmLGdN+JN1RLaIOIK:PUjuFCShtk53dG2JfR1OH
MD5:	4EB3FB9E2A47037C7D42D74C3A2F2E05
SHA1:	04B89CD03EDAFF68E853A2353554CEFF2FC57BFB
SHA-256:	53D23CEB8AB8C0489E3CA465E860A52F028B19D83DE0689245EFE585E2697BC8
SHA-512:	28B969B2C51369C8E26FD4C8B51A1DEDDE2EBD4993EC4596F62C3BE0E146819B569999A6D902AF27846F3C7FA0F60FDE0B2BB18A1EAB99C973B0B1775623BA9B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.....................................................................................................................I.........................!.1."AQ.aq..2.#......3BR...S..$46Tb..CFVcs....................................;......................!..1A.Q.aq......"2...R...B3.#$Cb...............?....WmaR94@HS..JT..NN....U....g....X. ..M8A.....Z!Db...w.TH.S...BQ/z.**/Q."Ju..U.c.:R.Q..1.S..1y4.....D.m..U.~ ...2.'.Jv.a....F..4....o}....E...:.?.....;.tQ.........h\:....Z,s.8...R.Sh}. .%....A.8d........B..t.....m8..c.E.dJ.DW.(.QE./TQz....XU.W....'..;.p.d.\|Z...p........0.L.]....0Qy{S%G5..(.8.......^.@./Jt...Q5..B.j(.N.F..("......R.h.(..N.e1;.d.L......... .6.r.z.`b.T.....A[.-.k.3N4..3.\|Q..%Gz.{..'u...<.%.8......,Y..r.}MVIq...1..4h.`X....R~d..4[......*'(.R...76.8....s...cq....>....^...TRW.QIS..R.v...rg.3.....f.I....z..T..&.D.Q..J:("Z(#..J...E!L....H.G.@.**)..!.@b..T..B...b.h

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3271
Entropy (8bit):	7.903764332912642
Encrypted:	false
SSDEEP:	96:ErIKpLWrbt9EfU86XwKg8La9+llZkveeKA:Eruvt9EM8wLaclYKA
MD5:	2B060BDC7E69B78132F7F3419E48780B
SHA1:	511D76DD1F8E3731C23744177E70442BE3070B44
SHA-256:	B33867FB7BC131AC4D1B82C02F97202DCA41BFB4C20949369F6AB24C67284E1B
SHA-512:	02355D394880306775CBA35B70A511486EEBE63299E9D93639435CEF3DE575F4CA6901CA970F21888E71B9DFE84002B55E24DB83E8DABA43B6C964B4B3932AC1
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/manner-matter.ru?size=120&stub=2
Preview:	.PNG........IHDR...x...x.....9d6.....IDATx...A.. ...A....\|...9m....#...F0..,...F0...`..F0....m.#.....`.#.....`.#..I>7g.j^.E.E...%0.A.Q...0..).H.`.LD......(..[......{og...k..........SMi......\e<...........Z...~.j...t..z.F.RQ.K&.X.V.x..<._..8..c6..~...j.t:..h\|l...,...:..yh6.....^....(]_&...vC......y.."......\...H$..b.....;2M..\|.....\......\.?J.y.G.y.X...\...{._y.....~?..>..6.. D.u........aXZ.B.....D".f..L,.....i.n.x>...X.{i..2..`....../.KE.QL&.~c.[...e.8.!o4.!....oyL(..N..<&y:..>K.R.D.....x.@ ........C.^g.i.......(....b...+@@A....'.!J(. x."E^.L.....u.......2]..k.}.9.h...z..B...b1#i.P....#..3.[.F......Mc}.../..c0...... .o......S.x%s)t:...\|BB2..li..r.x<....MK..L.%..%.....R...e........{<.T.U.j5D"..`.Za.X.6...D&.A..W.......R..f...zJ\|..?3./.....X..k...s...1..!......6..v....\|..P2...`4...X,..d"....4.........z.H$.h6...../?............v.Q.....W.c2v..O>..r..N..@ .+p.e}....R...j.e....3.,...^...n.j.m.q:.0....Z3.P/...@.....7IA(.*...... ..$...T)..D....T....s..........

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1638
Entropy (8bit):	7.837357304714615
Encrypted:	false
SSDEEP:	48:0B60t3/4uMI299DyII1YBuJ23NZtg6Rn4E4pA/lwaJ:0cE129lyPYBuJ2vOon4ETl9
MD5:	B29BD2D5EDDED5234F002DBDE1C4EBD9
SHA1:	5115E99A541B7DD39E96C46937FE0AA2D0AAC0E2
SHA-256:	8CBCFE75C9B948924F8C397BC9FCB2C361A2428001B0BAE74D814A932A6334D6
SHA-512:	D9D965A4BD692B2B3881FBFCF0AA4900B9F3FD0BE0A934EDB4580A301BF95294CAFFC93B572BEC2A532AAFABDCCB6A27E3CF82817E4E2A6B10533DEAE30B0C48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....-IDATx.....J..{.....m.6..m..m..m.m..n....[...=x.og..L.t.t&.2".L$..^[E..!U..<..6).........KI.!j......(..^.h...C....J.^.Z>...m[....#......x},2..F...`..1$..,4....H..c.U-n.....~....M!.e..Q.t....#.m.)v`A..WOD...-...a...>~?..0`g.;.f$^[w.F..Im...#bo.<..M..G....K9.....a.k.#+..^1<W....`..JO..=8....s...<y..6.5..\.......P....3.#...=r....7..#..Lz..r............k.....k\Y......Y....P..Ck..>\|S..[....).N&5j.=o......C....:0A..~..7F......</-6a$..97..p..."...+..l......q...p.I.2(1....U0].S..}/...9........Xq......mU.........}.".....OT..O<L".W....~......q.}...7=wIG.E..!z...d...q.q2N.x.\|....O.F.\>....6..{.........<;~........h_.cH9...Hs.F..@)......\|../'.Jm.P...9......"......O.;b.m...iT.mSP.dg.(....tr......P>...P;Nr-.(...".......n..........v....144.#L`1.....tTq..U..%....w.[.f..`-.,........O..].r.. +.....$2g.+`....R.....?(...'..2f.y.9.D^<.BI.Bc..6.5..(.Ra.4..,7@PJH8.J...Qmxr.......[.sxp.T..%.5e.E..z.T.{6.......%.8..K.?@..p=..}.x.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	921
Entropy (8bit):	7.667602095802721
Encrypted:	false
SSDEEP:	24:xosdOaJeBIf6lgnw7gOx/hmi5PRaumE/IgaN6ABl7nnuI:xoCZJeOf6lgnw7gOx/GY/I96ox
MD5:	BE41633DE757962CD88C44D34D8C76BA
SHA1:	31AEF2CBB616DBA0A28069F3838760E0775AC0F8
SHA-256:	CCBCB8CF4B2D567471E77BD7365BBA41F2FB29C8374B3F532E39AD6B14829065
SHA-512:	F794FE24608EEB80293174B60F96E877062B7EE98CDF47C260485007AA39EAC8A3F34E99EE82DABB4E0E22AFD0E99663D9F86437C59A4DB8C1CBF3194F9DAA67
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....`IDATx....lmM....m.6..m.m..l../.J2O.....5...l.q..H.,..m....g".....il..z..q.7O.mBC....7\..T..H>..1....w@F.n.....H.....d.........._.f...H .>.o......\|.h.T....>.=M...~....<...._........x..K.Z.U.:.!x.F.P...t...D;R.e..._..>...x......!......m........&......~....(......p.A..g........9..P..P.7....d.Sb?.q,....I.......VR..=.GO.:.......p>.R4...O...#a....M.s9<.>.X....}....-.k...h..?`..0.)P...I...`.)..V......!..G...7..<....}..S.....I.M+>]y...?.^U?..o.......Z...CBj...+qU.C.n..QI.G.F6.$..9..'._.kLb...}..B2u.>.k.G..?..i..B...40.N.t....,..cH.<......v6..;.+....e.V_h].q.\|i..0*#....?...\..3.K.?....o....r..h.K'.d........&#......=......Y."k....).a.f...Z..................n.Gp......z..qi.w@..n.\|..O.}m=4....U.;C.._.5...Iw.jk}.......~X.....^...0Q...u5..el..z.uj..9..w.i}..Y..p.... ......S_...'......-...@.=....s.....d..%......~,..\f.........m/i..K.....IEND.B`.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6912
Entropy (8bit):	7.9700433187258
Encrypted:	false
SSDEEP:	192:3Cg/8kYP03ireM/E6ew/uZR2YrqTw0rFn0jUAjoKB:l/8FheM/aw/Y2rZ0j/joS
MD5:	4C7FA44A16A2CD28566BABE07C3072A4
SHA1:	81D57AEBEB1CD7C8836A1279A8C63AF675F4B512
SHA-256:	6E656468E6272DF2612521B7B48FAA6A5B4FD87E12C4428102C295696DE8F3B2
SHA-512:	35B4143D04DB5238B9C907F93C78376615C08FDFD10273E7AD0E238F04DB1C13B8EA53CE4F95A2FC65E0E6016C1933C8BE67C960E75BA3914594C5E6187D6A96
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/5235951/_YTYfRylGb2kyKOb3jGtew/x180
Preview:	RIFF....WEBPVP8 .....x.......>Q$.E.........YO.i.{O =.5K...,....Z.v.#K}zv.....K.1...;...W...l%.".j...,{...g{.......LZ.\........S.<u.......~...=b........LB.e].:`....bw.y?...0Ou.......I.{..X6.l.C..~_..f+I..O.3....s.....F.Q.#,.-.f.;.U.../....1Qj./.J.cu..........d....\|...,V.Y.....b?1......=x.wQ.0.8.:.\.pbl.MQ.....s3....... +`...G.[..]..fLw!].=..G0?.E<....?2.+.. .`.b..S..mA.....o..A.............j..e.E..\|..\.....U.;.:.f...3;J:.N..._Q$?.a....f?!..[)...gX[....,hM.j..W.J..9.C..H[......V.....t..d.=.%r.<].`;.t8..z.....\|.2..p>".M....@9.I......0f..r...l5B$..........Y..,..4.N....Z~v^..8.G..%.Y.(...as=..$-.;........Lr(@nX.w.(y...r.Q....._...0.....P...1.R..M.8e..7r...c...o.7...8w-...j....f..8@......-....&.\|..j2.-xR..... .W.}...)..D .._...E,a.W<....H.p.&ny...9..Y.:'h.....A.}..U.z.....J...q..y..A......{IW...-Q......`9-.r.pz....4..}..$V.L.......J.z.._...$..p.pf....Y...Z*Z..@.e.z...o}....;!....1..I04...wV.oo..[.da&Jn.l..........%s.....0......i.....}q.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	10733
Entropy (8bit):	4.988839741683123
Encrypted:	false
SSDEEP:	192:YFRYlRfiAjojA1sMbSggUdgPzvi7Vp5d7Zq6:SRYlRfVjZtDgUaPzvup5dF
MD5:	94BC4228BB5941670E191E40A6BC44BD
SHA1:	AD06418894462185E7EECC1421310F552E1E5E36
SHA-256:	5734F1B66DCB622529D435ABA20990813D43553F949BC0813719B4E7D1252527
SHA-512:	F358EDB2CCA8EA1166C2371213150D32369C30F4E6A6C29E64A41BFE46FE48D54CC09609F83FC37880F810E22A84D40C40DE9D31F17236A6A57CD3D7762BEB27
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/akismet/_inc/akismet-frontend.js
Preview:	/*. Observe how the user enters content into the comment form in order to determine whether it's a bot or not.. . Note that no actual input is being saved here, only counts and timings between events.. */..( function() {..// Passive event listeners are guaranteed to never call e.preventDefault(),..// but they're not supported in all browsers. Use this feature detection..// to determine whether they're available for use...var supportsPassive = false;...try {...var opts = Object.defineProperty( {}, 'passive', {....get : function() {.....supportsPassive = true;....}...} );....window.addEventListener( 'testPassive', null, opts );...window.removeEventListener( 'testPassive', null, opts );..} catch ( e ) {}...function init() {...var input_begin = '';....var keydowns = {};...var lastKeyup = null;...var lastKeydown = null;...var keypresses = [];....var modifierKeys = [];...var correctionKeys = [];....var lastMouseup = null;...var lastMousedown = null;...var mouseclicks = [];....var mous

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1186
Entropy (8bit):	7.475005998066067
Encrypted:	false
SSDEEP:	24:+0o0XxDuLHeOWXG4OZ7DAJuLHenX39Afm7PqaNm9225p4nbgQIAi:+FuERAse149JAi
MD5:	BF162286F8DC2ECCEE06D054B8004AC7
SHA1:	FA2E83B0FC0E864316508227DA960DCFDE0EBF09
SHA-256:	5A57A0AE05397D51833DFF2C24CEF9D89E654E2864CD665B31DACA3394F91B46
SHA-512:	EA4B66399CE8372C56104C0254452DF6FAE8A7CC62C0329D4C64F654168C9252E403E7B6575DFC34759420C821ABB48A625FC23C9E24FAD9858BCE6D3C8388FB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....k...W.gr.dl....v...[....".o>........a. d......;.^.+..&.,...~....u..\|..x.E.4..M...M..hZ....:..l..Y..'.......)..#IM..i....w..y.jxiN....K.{.#....;....+..,5..u..b.627..A.....kK.g.W.d`...2.{..+...._..;N.....w....G.....R. ......>.!hz...Y!......I...2L....I..e.......~qC8P..>....{Y.Mw...vm.U.b.*....U/;Z.......H......6.^....El.....G........8..J.....j....6.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 301x301, segment length 16, progressive, precision 8, 200x133, components 3
Category:	dropped
Size (bytes):	10741
Entropy (8bit):	7.934283810581941
Encrypted:	false
SSDEEP:	192:yMzRdgSnbrJoqibHut4xbscABB8kvhd1zyuhJ7ryF+ts1GcoY8:7zT3nbrJvaHKB5H9hfh7rW+tfnD
MD5:	74E1D727AC4F6F2CB32411188501EDCE
SHA1:	98086F68C651D864669A922EFB11F313023DACB5
SHA-256:	B824E975ABE4F24A0CBB7AC1D5C95DFDA3FE0797B35E699E1718634A12F0ED50
SHA-512:	AAE0612BFF373B3199FDBE4BD6269BFDFF3232DC6063FDD912B261DE787503DFF85E3D675D1B4583A1F6A100D9377DAD5962863AB8379A1A8ECAB0D9E877A27F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....-.-.....C..............................................!........."$".$.......C............................................................................".................................................................................Q..%1. 6...=.e..<,`..j.....)...hj.A.)..2..E...2:.J.d@........K......r....-.B....).JEi..^..1...P.h2..m__p.....dB.....oaZ.....q.f.No...W..VgS4O...X.p...z2z..@w.y.u.B.L,..Z..pZ...Q..,SV.Gg?fb#v.a.L5"..+.9..?N+].;X.s.nm.....s.I.A.H.+..U.V:..zX...n{l....;6[.zv_2'\|..2..&.j.v<...I.?O..2...6...,..........N\|TI$.......2'TS>b..q...`z.<Q...!.Kh.......$.i..../1.X.7mq... .Un)..{...3...... ..b.%..6.:.a...5D.$.!..IS..%6...."n....A.\|...J.t.A_dr.HW...'..........................!".2#1.$A.3..........V.o.$4u..!?...p\|...................5.A.'!.}.....oS..j@..I.4...y.7ua....7.........../.t..:.....hM.t,..C......$>.8U.zc...++.dS...W.I.<z...9D.s...CmI...oo;>.p9.?Q_.a..t.X..]t.."..';.*.....Q.<T...l=....q...Y.....!.....-v.6c...

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x191, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3844
Entropy (8bit):	7.942227587366318
Encrypted:	false
SSDEEP:	96:MxCwOhz+qUiUkjY1oFmCWavB3ICX6YO+Y+2xuml94qo+:99hzhSmFmcvB4CX6YO+zgD++
MD5:	9B6F4519F5A4EB834761D2F8D527C0A8
SHA1:	E3DBEECDEA1F035B319E3F8CF5CB741E706C247E
SHA-256:	5900364CE77A7A30AFE26AE34976674D15B9BA9533220895836121D84F471965
SHA-512:	2D53440210C4C6FEC0A967DEFB5DF6923989E74EFFFFBE1D3DCF082DE78952B0A72C266B151E380EAF19D1E83F6EEF97E9F2C2B02484ADC2CE578F88E545A761
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/10070214/picce57669c9a2289934f175395af242b91/big
Preview:	RIFF....WEBPVP8 .....H.......>Q".D!..]vV...Y.<...~...l.O..rtpz_'........u'{....{.K.O.}.ws.~.}....G....;...;..z5L...3g...Y..<.~.....oo.....=F..U^..H.....H.....H.....F.7.......'.K}.....0..>>.y...n.F..AKL[.Q].u....[c,x0)2..i..3...zT..u...~...^..s..=+............s.;...;o.K.3......y.?6$.,\......$.h....a."..u.`"2.j.<.S.......a...HO.$...H;.g>.a.V.E..~P.o.l..Y7.....4.....^.F;...h....k...n..\..}k.E.h"Tg.$..a....<..dyO.....7..tSd_._.b..1E.C...b?.L..OA.....kB.......dU+.4.09n...1..Z.5..:..L..G.W.z./..l.Yc=...S.."..">Zs.....LC.\|{M.6.g.../..A.eA.....C.I.....M.Z~Q..v.....2~................,@...b.g..+?\|X.Y........~.w....t@....&.Cb.....~...S.....jw...^..lOS....^.z..d..6\|.(.....O......C...#........x.....<.t.[....].L......Q.VB...Ki.9...Rw.............WS.`.....R.....}mM...F.Z8.s.A.]..H..S.R/.Fx..2./+:DS...[.:.A...,_.,...n.U......c.Wb.....)V.....=.FV.{Z.....8Xz.......z.yy...J.)...D7.).}.$...@./.k....\|..up...2.3.....2..#..]..+.D...@\|..$i..E.T..W..=tD.TMlD

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x135, components 3
Category:	dropped
Size (bytes):	6465
Entropy (8bit):	7.922916367079734
Encrypted:	false
SSDEEP:	96:gLS8DHFJGyF8OpAsqEAWb5UeCFzJdqGgm1O4/jrp8sU75F0Aj8xN+Oe:URN0spaFz3qVCb/jrXU7Bjg+Oe
MD5:	75F1A731F1C7AAEC69DB283F43EB841A
SHA1:	29CD27BB47116F0DB8CB1EAC7511BB702BA2686A
SHA-256:	53E6BC7866A60703B769FB31CF7421BE5B7F799A451636CB5E7BE34F4DB94164
SHA-512:	795E66654EE017AE9E291DE7817969EFA39030819E840C3E14B2D7535EFC11F8B47F926431BB5AB28D2D182C1738B118BCE28B7648A3AE0EBACF7CAF9A78FF43
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................N.........................!.1..Aaq."2Q......B..#CRb....$&3STcs..%6rt..Ude..................................&......................1!...2A"3Qa.q.............?..dS.7dS..@`......!.S..P.w..4..k.D....%....h.OT.%.$..u7.....pFY5.B...j.Z8.;S..M!....-).......q\.c\L..(Gr..]=..n...a.4.....e....R^_...X...7.........-.J\|6...g.._.Y#.-..=3..$v..[..'..`...%6.y.-.N.u...n..[?b.p.?.s...T-^./6...5...9%.:.D....1W.#y.".5.n$2.6)_..........D.F6.......J..1..H..U...e.....k.}'ou.U..,...JI'q.R(...J:......... ..-...<......3...#2..q.0..).$..z..fg.tr9.....PP...u....bD....ko:u....U.e.}l..=.co.....Ik..6...^-..../.....4H.!.r?.....jk....7..?......H...n..e.......J..*......R...$..dR..t..)..&.0).qL9..N.MshS.EBP..7.h....K.F..C....wm.Pk.dy..9T."..c.2..<.....9.........W.e.%..K.>...zMZ.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	342
Entropy (8bit):	6.996524441522557
Encrypted:	false
SSDEEP:	6:6v/lhPKqHVqVNWlW0QurrSkJAMNU5qgoaGGgTTfElmbssLzSrLvHX7Rmi5IgtVp:6v/7ioVqKHrhlU5qgaTftbss3ALzRmiZ
MD5:	41643E4541837323EA07F3523FBFCF62
SHA1:	DAF2C85C4D84F4837618F85319EDB053F94222BD
SHA-256:	0F38C945F9C9A76777F210D4E6F14A0D3CEAC2BD73E96947951DC82786191F29
SHA-512:	AF032FADF89291B76D21E6239F95ECEC95080A6EF8EBCA6EC7E317A0698B76D4252A54F354DDBF18E480C84059CFC3512948EFC89E6FF654BA9D3FF95A7B2F2F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.bd``..0...a....F..BH.....^^...y8.s....%.ws....&........ n=.............!...x.4?73....-...lD.....e........{..8..L'....(G.0.n..I.8B....Dt.c0}............`zV.4.....L.ip...?!...=.......!@9hO....ab`.s.k......x.......^.#F.A..\...........h..B..5iv..\|..7.$..G...p.g4.Q..........SF.c5......IEND.B`.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	362
Entropy (8bit):	4.653412101888283
Encrypted:	false
SSDEEP:	6:YGKeqgXNH0EyMJmTEkK8gQXNHpTEkKjASkgn8GpXNQcEDapb/kbCvO5EkHVHdy1o:YGKeqsfTnkK8PJYkKjASkELpXNOaZx1o
MD5:	2B39892F191A8C43816FDE6BAAFCBF62
SHA1:	5B474BE31896C631B9874FA989EFC7F5C76FF1C7
SHA-256:	1B21BE50822C8F1E162A563F05543E3D8B2F97A91E6EBCB8064EBBE13C6037E4
SHA-512:	145AA0C9A721BE0F4A8329C201C1EA194F2A58FC597E2830F92267102632C0979B6A174AD5E2FA5C37B10934E1869B68FB3573CD00020B346715AA413238B5B0
Malicious:	false
Reputation:	low
Preview:	{"counters":[{"id":1014923426,"label":"ZLOgCM6elGEQooH64wM","type":"adwords"},{"id":1014923426,"label":"uXlUCLqxpmMQooH64wM","type":"adwords"}],"customDimensions":{"b":"","browser":"chrome","extensions":"","fresh":"0","fromCancel":"false","fromGoogle":"false","infected":"","loyal":"0","old":"actual","os":"windows","p":"","sbscrb":"","slow":"","winxp":"false"}}

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x189, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4596
Entropy (8bit):	7.951899580345721
Encrypted:	false
SSDEEP:	96:AKF2cFotpfp/0YObpeCbf954qpeO7cV6j3sG8kgFlfwXdtIs:JocFwtp/geCD44f7443sG8kIlfCdtx
MD5:	986D22B06A489A28C8924B7591D8C621
SHA1:	32BB5CE4B4085BC07B61CBCBF07480A1654335EA
SHA-256:	C1998DF061BF0A87EB7D2D8971153D655C0C921097E2E3BD0666B960B807465F
SHA-512:	04CD1AB22EBE4B87741C74B6ED07860B69B19F4AD0505C10108B7C6B89BECF2AEC482A2B0A7A387A2EFE75B8EDA6E3DEBA588A81F6F9E007076CB59AC28165CE
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/10314704/2a00000188a2f48cb87880501f5b2085a288/big
Preview:	RIFF....WEBPVP8 ....0P.......>Q".E..v.\|..A-&m.S..:c..\\|...!..jw2._..G{....?.o......=.W...xS......k...A..~@...?.\|9...G._....T.U......w...g.........5?...........}.?..q.....?....M.Q..\|..;...c..m_Io.M.V......+4N#.]..h..@(.....TJ....#UJR.....C.....)...!....'.u..PO..... ...m?h..x...,..A.A..ty.JN!..UJ..x......0s.]..t".P....(,.Um.I..3yW.b..7,4.fS..E..(.Sh..h....v.......%........b.5.Y.F..5.2..s...<.......T..,..F.m@....&..)...3.._c....~>p.).J.t....C.....L.mA...h.q.kp~. .......1........0...1.......w....Yo.j......U^.w...s.9..T4...g..>v.."U.....o..>.G.....Z..+..&..A...z..4yr..?U"W..@5.fC.......^f..E..p..~.[7...U..=...R.."7....M..>].S\|......v.G~....;e.eL#.S.{m.gC.....Z..r...>.3.y.P..Jm.R~..n...$...I.....4....%..FU...N..{'..T....[.S...>D.K....#c.....F.`.{,r.d.A.a.O.!......ZQ..\|I.?Z=_)Ug~.......bB.)..\|.K.H..J7.z..A....}[...k.2...o....} k.........piFw...m......Er.9..t..C........9.I6.H.....p..A.. ..;....-..B.....b`.)0.2^:r.g8.5tjg..`!t.\| ..m4....

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 500x498, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19364
Entropy (8bit):	7.988544060207728
Encrypted:	false
SSDEEP:	384:EuVUW0G059EqOQ7uAzrhrybj3ZzCCCUytvh8vmjghwq7Oj:SG05F7rrOZzCC1yDJEhwA0
MD5:	D4A62E8BB11EA91E2AD64A02F9680BBC
SHA1:	53C9911C66A58F3D38E5840EFD6E44D75C4FB422
SHA-256:	B9EE52B3BB2237FBD31A5869D51B8AC96296E48CF46B03EDBA6D4E7EF99C54DD
SHA-512:	E6A83701C67FB3C0BD45B551FABCEDFAE054D7A486BB61FA4F8DA39495403AB0C505EFD05905D82A3A6F5E3AA8010D0338C8D635BB4BF38C068DB92A4C169EFE
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/9710187/2a00000188a054ad11eb06c35a3e0c2ff733/huge
Preview:	RIFF.K..WEBPVP8 .K..01.......>Q$.F!.j3T..A--.1M..sU......:%.?........W.!...o...:.o.~<....Y...x._{......._qg.e/O?....Y..z.....i....~......:.-...y...;.......^.~..U..?...\|........{..=.?...=.......?p.....o`.(/...........L.f.B...e!y\|.....D.H^_"....U..../Ut.b{...],.....WK&'...U..../Ut.b{...],.....WK&'...U..../Ut.b{...],.....WK&'...U..../Ut.b{...],.....WK&'...U..../Ut._.R.....]X.Y1=...LO.Az..G.....F.j.(.i....@....fZ.v........@j....LO.Az...w3...t..tus.C.A. ..f[.r..q........6..i.....9....P....f....../@....N..M..>.~...E.:..j}.......6`..../.>.&.....W..........\....\..K&'.......0..+.5A.....;.4.KW,N..-..R..XF.m*g...K....q....W#G ..c..fjV..y.?@....L...!...;\|-.c.<.P.%x...\|......'. .}q!..wo..%..\'.Z..B.3.f......V...._..............QD.x&b..l.9.w.A.u..n...P].i....!M..mf.....#..s.Q$+.0!..=.../.Z..r...CJ....)......~...0...3..%G.$..B3....W@.7n..#s9..k.a.G.m."@7..[y.:.../0...@...-...A.....8....05.r7c?..)..sKXu.(......U..{mB..!}._...yA.=d....w>."....)k)@.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-includes/js/jquery/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4358)
Category:	downloaded
Size (bytes):	5520
Entropy (8bit):	5.07877659735423
Encrypted:	false
SSDEEP:	96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC
MD5:	6823120876C9AFC8929418C9A6F8E343
SHA1:	90B0ADB37D70FFEC5F9189C36BB0027C310C9502
SHA-256:	B65B3DE1BC923B9355248A0D941A0EAEE15DFB9A6B8EADB51323A8DF6189DCD1
SHA-512:	63D84226815C831245754ADB30040EE72DCF218D01F991A5619675374BBE3B706E3721D32F5120D9D27E500813E8214244992B3875B3A7E7E4BC7DED5201183A
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-includes/js/imagesloaded.min.js
Preview:	/! This file is auto-generated /./!. imagesLoaded PACKAGED v5.0.0. * JavaScript is all like "You images are done yet or what?". * MIT License. */.!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=typeof window?window:this,(function(){function t(){}let e=t.prototype;return e.on=function(t,e){if(!t\|\|!e)return this;let i=this._events=this._events\|\|{},s=i[t]=i[t]\|\|[];return s.includes(e)\|\|s.push(e),this},e.once=function(t,e){if(!t\|\|!e)return this;this.on(t,e);let i=this._onceEvents=this._onceEvents\|\|{};return(i[t]=i[t]\|\|{})[e]=!0,this},e.off=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;let s=i.indexOf(e);return-1!=s&&i.splice(s,1),this},e.emitEvent=function(t,e){let i=this._events&&this._events[t];if(!i\|\|!i.length)return this;i=i.slice(0),e=e\|\|[];let s=this._onceEvents&&this._onceEvents[t];for(let n of i){s&&s[n]&&(this.off(t,n),delete s[n]),n.apply(this,e)}return this},e.allOff=function(){return d

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 180x135, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5014
Entropy (8bit):	7.958362383999569
Encrypted:	false
SSDEEP:	96:ZK7cMDH8yPF5CW8tOisqeo42S1ZpFBttZX3X5Jk/TdtxssTSZSCmpkH:ZK7XH8y9J8xsVS6pFBttZpJkbhqRH
MD5:	9C697237010B928F2C548E5196E8965A
SHA1:	B0EA7143EE3076F138B212FBB43F1F25AE37D708
SHA-256:	C43B5F1339945868DC6C608FA4B7362AFA00A0E06BE838CA7B8973A18D2C15CD
SHA-512:	60F21E536D22B021628BE176396BF36A43BDFF3E996CF3B0E5F74C442DCEC0A0CE1B92220EEEA9363C2EC9F523A57112362BBED14B044D866AC6B5C85C4435C3
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/5146926/b8_SoKGCJf1bxAcZNxExjQ/x180
Preview:	RIFF....WEBPVP8 ....0W.......>Q".E!........Y.1p2....A.SA.;..w.......xS.?.......Q.......?..r.7.g.....mG....l.......;U...O.w._........a..?......_q?.O...v.,.......7.\...[`..6"p...0{.?._...3y.=m1.o......2R.J.h`.@..j...;I...%....jsW6\L].v..IY....Z.[hi2"$.B._.......?....]..H,v.......}..!....c..n=.F..."...K.-.R..C.n4q.o..5.);.]j....5.....k.<...X. O.D....L..LTZ%..1........~.5...xqE....zJq.......~...o.d5..6..Y.+8.a...g](.5=T....~......m$..'.E..i.V(_./G~[E.'B....wT..,'...=,.;...k#.q.(8.g.<9..b....)....7@%;\|._\|....%e...-J,c..Zu..].F....P'.'.@Wih......~...i..7..KC].q....J...5q...................0..TA......{.y.'@^...[..d..q91...}..!.1..n....4.~mS.c..Y....N@[..6..1{.'l.."....[...[.q>J.L...t..(.................+g....&u..W.5.;..0.hr.:..[...j..b{r...;.YV.[......P.....m..(......g4H05O...\.jXY.rd.$.QV..........Q...b...`.r.7..X.x...?$..o.t..?........!...t.H.>.f..<.`O.\|F.Z...........@..,..k.p..n.:.$..t......."v.....j./.....8....w...o..........*5.[s....9.@}x

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 267x150, components 3
Category:	dropped
Size (bytes):	15122
Entropy (8bit):	7.947294933124409
Encrypted:	false
SSDEEP:	384:tCF5WR1ESLygmvdIpifqT+3AvNcmoF0GJFu+bxrjutL:UF521EtgQx+FvNc7+GJF3bNC
MD5:	F75B818717BC47E6669167DBB560529C
SHA1:	C4D3C8DDAC5AD58E1387830870B815766334F6FF
SHA-256:	A727B385856AA6010406453A963A814C94DE1296FBBA7F81DEDC330AB770B8DA
SHA-512:	0045A204C498729AB74F8704105FC5216EBF83B639489E5ACEE65E4FDC9AA248F8AB98D098FD8098490F33007C3EA2B251A5022CE15EF2EC20820507EE2A06BA
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".........................................C..........................!1.A.Qaq..".2....#BRr..$3b.....%4Ds.S.................................1.......................!..1..AQaq"2.R.......3..............?...3...O...D.x....\|d=s..........7.....`....I...TYW,.n..H$_.}.....N.C.2....$.\...}!`sbRlO<.e...-m._..C...1on$pO...$...^..+.....Y...&E..>..$2...(q...#R....k.,VT.........,>V.~H!.}GY.........;....I7..&.q..t'.Y_..e..a..6.f.`D.uG..r.[...{?.i.d8..F.fJC)...H.......Y..W..+..K_.!..!KqD.tw8Ym..4.....,.6.$.o..y..Z.:c..Z!.....iuo...g.r...G.J.N...m&.m.<.w$....+f...Y.....+[..C\|...X$......Y..>B..J....%.2..&..Y.6VOukz..w'...*\.p\....96..+....#(.AB...Y..(.?.....Z#...W..9.e..6....H.-.6.P<.7.$.q..-9.R..J....:..S...F...i...]..h..r.'......L}..g.t..2.....Z.}..S....V.{....8...l..UZ.fy...G..4u.G....$.r

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	735
Entropy (8bit):	4.677036162066608
Encrypted:	false
SSDEEP:	12:a37O3qWAkH2VtdvGMQVxbsYMivoouNlkD6yytAixomxMLRmSSctRw:A7kdjEOmYnvsPyytpxxMLRmSS0q
MD5:	44A6C57C19D30FB0B18ADE3FF8ED2CE6
SHA1:	C6F899688FE490214D95C9188EF5E6840D378602
SHA-256:	C75237EA0D8567B88AA4E2F3FEC03B3EB8AE88E65E68147B09273986FF1558A4
SHA-512:	0C5B45D3875F96EA9AADB3F228FE742C9F0522336D5838EDB5C89A61DBA4141B1CBD200509AF6CAACD3397A6348C0EAA88A4779AC76C19A2DA32EE307D577654
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/assets/js/ads.js
Preview:	var wpquads_adblocker_check = true;..var wpquads_adblocker_check_2 = true;..window.addEventListener("load", function(){. setTimeout(()=>{. var wpquads_sticky = document.querySelector(".quads-sticky .quads-location");. var wpquads_location_ad = document.querySelectorAll(".quads-location");. if(wpquads_sticky){. wpquads_sticky.style.backgroundColor = 'hsla(0,0%,100%,.7)';. }. Array.from(wpquads_location_ad).forEach(elm=>{. elm.querySelectorAll("img").forEach(img=>{. if(img.dataset && img.dataset.src){. img.src = img.dataset.src;. }. });. elm.style.visibility = "visible";. }). }, 3000);.});

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hd1Y:w
MD5:	FA9C17CE126A76733ACA269345EB7D47
SHA1:	F1D8AA71F281509D55041F671B1A7BD94524AAD8
SHA-256:	15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8
SHA-512:	DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkmkTishDHu-BIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgA=

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	154023
Entropy (8bit):	5.772916428830107
Encrypted:	false
SSDEEP:	3072:aY+uWWa5vPd99QVJvD8JllNOE8gG2JCr42Lcp1Pz7dCuqrYXz4xZKIQfpjZ4gG7T:aZ5vl99QVJvD8blNOE8gG2JCr42LE1PS
MD5:	9AB6C61891F7D4D9C6A4AB6F3EF36110
SHA1:	E678C6BAE2DDCCA6876543EE648DF99C981E3322
SHA-256:	B646FF6022DEA3627D1228E218B7E85E57E2C75A34F3D6F4199383AEF96111AF
SHA-512:	9D2393BF840F89533652964EC4F631B28683EE8D73FD6ED578596D55D754E864EB18BA51BEEC5B0E343901AE37607A11604647CB02886DCDC65593FC52CEB25F
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/
Preview:	<!DOCTYPE html>.<html class="html" lang="ru-RU" prefix="og: https://ogp.me/ns#">.<head>..<meta charset="UTF-8">..<link rel="profile" href="https://gmpg.org/xfn/11">...<link rel="pingback" href="https://faq-kak.ru/xmlrpc.php">.<meta name="viewport" content="width=device-width, initial-scale=1">. SEO .. Rank Math - https://rankmath.com/ -->.<title>... ..... .... .......... . steam - ...., ... .. ....... ...... .... .......</title>.<meta name="description" content="Originally posted by oottoo:"/>.<meta name="robots" content="index, follow, max-snippet:-1, max-video-preview:-1, max-image-preview:large"/>.<link rel="canonical" href="https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/" />.<meta property="og:locale" content="ru_RU" />.<meta property="og:type" content="article" />.<meta property="og:title" content="... ..... .... .......... . steam - ...., ... .. ....... ...... ....

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	7.774360922801194
Encrypted:	false
SSDEEP:	24:HutE+rRT6KnplqeSIWzJzPTGCSZa5kBWTmGF6GM:HIz+olrWtzbG1k5kBz
MD5:	D386DBBF6AA5AF179182EBADC017B14B
SHA1:	62A5FB9A632B68BFC7324A546AF5A4030452D76E
SHA-256:	AB44D964F9079E1FF01E3CE5FF2886352956B8B65802700C2E204EB8CF5710C7
SHA-512:	C19AF5280A7AF97E517A1553E8BF9432FAE2DF7A57005BE4597260533DD67011B3ABD1ED868441E331C11BF24DF6BCCC88837AEF96A4B824FB1070A64F7B939C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....SIDATX..Oh.E....\|..I\7mb...Z.........Q...i.TA......POB..../...b.AiUTH..R....j.m7&.........CVIK#I.9..s..w.yf.g...zH+....u@.0....K.aZ....>.m..Z. "..n.I._.5@...WU-`..7.m."6.7..e`-....7...3.G....g.=.......`....h&.".7h...'wY......M........Y.M.. .gq.....,.@.o.....m.....q..Jxy...&...8.9.+4f"bo........0..n.>.M.Zr.z..y....~...'....hz.j....8.. c?+..3..{......=..9.-.@8.u..{@..n$kL.A..D5 ...D.Hl... .?!WJ.4...Sg[.Cc../>NP\|EQ.m.k.'.q.q.[pR...B..g#v...X....i.@8.l......;p;.......i...p@.Ril...Q..2.......J..d.S..h......-]....QSx...MM...N$..p.l..4..k...k..%$.%Tk.>J....#j...6...(4.......!....`..>..W`H....+.D...T.Q.....Gg......A}.!..V......u.A.. ..@..8......L..%...W..n..46)"....M&P...Po..W.jR..I`.x...).@..2..pEU.5..a.n...N.4..XT#.G.:......B...c..\|..ZK.0.X....yCf.W4)cu.k.X;..X.B..j..H1...Ap.K~.ox.....h.L.....I..c..&M...j ..!>....._....G....KjR..M........!.qN....0.\|......6$......cx.WP[B....1.R.ISV+......Q~W....fF......b..."...-

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	837
Entropy (8bit):	7.698212121173883
Encrypted:	false
SSDEEP:	24:LT5wrLeyzVX6HtmLh0sH+8zmllfEA/1ATo21l:PWO6kHtmLh0EDKlNEyOTt
MD5:	C5797DD153B338170CC40FF2FFB35F3A
SHA1:	BA67F65B9FFEDC75EACFFE42F5D92DF82AF4D360
SHA-256:	A1504FDBB6CCDF345180A9AFDDAE0BD7CAE18DBC77BE0DB0CA5D4562C407C4BA
SHA-512:	44858FECD8E2A0A2E85A5F24AF1CABA33BF76C7F315312261D5C1BBEFD7160EF3F666B1B40C4537304D4329AF72A407701086B6D8C728E48AE70C73496AF1126
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$[.F..m.m..=.m..m{lOW...\vaN_.....cD..S.....,+sJ.E..{yC^./.l<TgT...XW...e.I......#o...J........2.]k.<...../@.....5.....U.J..o.<.?<...>w...a..-...C_\|;.7...F\...;.+-;...#.w...a.........?.}./$FT...g,.A{.GA.....Dh.^.N.u)... 1#...GW.35.....Pj-9..........%O.+....$s.Q.9K/>=.l5'V.O.V_q&.I......l)..w....}..n1..&.r.l....%[.`c..}&..`.f.k..._..C-1.\|3L_c..".e.0.M...G_.g.....4uv.\|N.?m."..9.0.M6ab.!.E...Qu".....:.K........>.L.E...+.......Y=..7..4.]d..K...f.....\|#K6{ N;M..O7....:}.....C.._^.....ID.......G....y.z...uV...^./...sew.....s..Y.-.v\O...[.sN^.....f.J@...A9.......%1z\...`f.._..-..<.....D.......\.h]+.Z2..4...U....\...5\|..g....k.+y,.E..g.GN...*..f."p.\|D.....8\..<....!7.P....Sv+Z.Q..4..Z.].A._2&_&..1.].o..uuy....<.$.5.<.$.......n........IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	837
Entropy (8bit):	7.698212121173883
Encrypted:	false
SSDEEP:	24:LT5wrLeyzVX6HtmLh0sH+8zmllfEA/1ATo21l:PWO6kHtmLh0EDKlNEyOTt
MD5:	C5797DD153B338170CC40FF2FFB35F3A
SHA1:	BA67F65B9FFEDC75EACFFE42F5D92DF82AF4D360
SHA-256:	A1504FDBB6CCDF345180A9AFDDAE0BD7CAE18DBC77BE0DB0CA5D4562C407C4BA
SHA-512:	44858FECD8E2A0A2E85A5F24AF1CABA33BF76C7F315312261D5C1BBEFD7160EF3F666B1B40C4537304D4329AF72A407701086B6D8C728E48AE70C73496AF1126
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/easypay.world?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....$[.F..m.m..=.m..m{lOW...\vaN_.....cD..S.....,+sJ.E..{yC^./.l<TgT...XW...e.I......#o...J........2.]k.<...../@.....5.....U.J..o.<.?<...>w...a..-...C_\|;.7...F\...;.+-;...#.w...a.........?.}./$FT...g,.A{.GA.....Dh.^.N.u)... 1#...GW.35.....Pj-9..........%O.+....$s.Q.9K/>=.l5'V.O.V_q&.I......l)..w....}..n1..&.r.l....%[.`c..}&..`.f.k..._..C-1.\|3L_c..".e.0.M...G_.g.....4uv.\|N.?m."..9.0.M6ab.!.E...Qu".....:.K........>.L.E...+.......Y=..7..4.]d..K...f.....\|#K6{ N;M..O7....:}.....C.._^.....ID.......G....y.z...uV...^./...sew.....s..Y.-.v\O...[.sN^.....f.J@...A9.......%1z\...`f.._..-..<.....D.......\.h]+.Z2..4...U....\...5\|..g....k.+y,.E..g.GN...*..f."p.\|D.....8\..<....!7.P....Sv+Z.Q..4..Z.].A._2&_&..1.].o..uuy....<.$.5.<.$.......n........IEND.B`.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/sync_cookie_image_decide_secondary?token=10234.5_ASplhEEbcdkyBDhF3OwFpDn7cTV2mrqVSoyDYusz0AivqAJsdt9iHVrSUEdCs3ss0ldmKC4fNBomSdUQqdBGN_YwnRjL9_4vCs2kc1yYzanL5K5dGLIbMILcLmRPZMaqHlRBH4eBYfD7kD1X7FTyHBlhXUj3RvlY09EScIWk3ud0KRodgjF04mbZGNgIF_W7dnISJzGX5XPGzbUao8WqbYImzKdFobayIt6QBlXpc%2C.C4F6dvTSgyUtyyqIfo9SDH7P3pg%2C
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	640
Entropy (8bit):	7.551207837475733
Encrypted:	false
SSDEEP:	12:6v/7i1qU8efyfhVHVM/1BOpViClNnRXl2g01I1SBZyf/LciDjGD+RTXp98sf8/Wj:HqUjfgrifCnhl2g01hcfIiDjqi598+84
MD5:	12C22C4D76887C60D988FCC9185E6C18
SHA1:	84475AE6BFB0B3B8047F0CF79D3087609A7C2635
SHA-256:	65361756FBEEB484699E581DCE37C9174737DC4F6CC3E9F976DBD44693EE40D7
SHA-512:	9037F95011691C365BAAD9CEC6A198CAA235469B6A8A66DE07DB7A768CE3D6C0F9AFE9ADD0EE2ABF102B4598D432833593469184D477FE350CB0ECF2829FD114
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....GIDATx..5p.a...=Y.V_./.]..03s...1....l.ah..Q_.Q.....X......7._.'g.D.!g...z......$...3HBL.....o..o..!..9.r.I.....A.\|1i......N.e........(.Cl.....x.N._ .......c...kw.6.S..]\|..k....`.NJ..(.1."c.Hk.3.Ty.;q.....\..7.L.Z<..b...}..z....=Y..(5.w ......Wo.A..;Q..g.a.P....A.hB!.......<T.D....(D......zD]A.H-L.5.." .1..K....\.....B...`.\..p.]@.9rh?.>..2<:.Y.420.L25.'...oM.I\U.k-....R.....'I.rB...).Qmq.Vj+../VMq"..yB............~..$...T+.+*.5.v.n.d..8z.7TR.........u.gv.7VB..F.sAo...e....r..vb.l.c...7...N.<......m..v.+1.p..?....C..0.1Ee:......w.s..........9.B.W.c)....IEND.B`.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7889)
Category:	downloaded
Size (bytes):	7890
Entropy (8bit):	5.038948727224542
Encrypted:	false
SSDEEP:	192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4
MD5:	D18523E4A4AAA9420A86E4DDDFB07554
SHA1:	FA22A3D38DC3C87CA92F1456846682ABEB696B96
SHA-256:	6E86A52A9858206302E32036D89907E3AC87762055E7F9C6364AEC33221B3E41
SHA-512:	5290650D7A2A12B6C2BB65B0A46BFCEE46D4058AFDD0999D7BEC1C7DB5ACD35038AC6A820E3DC2FD1D3DCA50776E9A2690BB0476F63FD1746564CB7D7329ECF5
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/rocket-lazy-load/assets/js/16.1/lazyload.min.js
Preview:	!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define(n):(t=t\|\|self).LazyLoad=n()}(this,(function(){"use strict";function t(){return(t=Object.assign\|\|function(t){for(var n=1;n<arguments.length;n++){var e=arguments[n];for(var i in e)Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i])}return t}).apply(this,arguments)}var n="undefined"!=typeof window,e=n&&!("onscroll"in window)\|\|"undefined"!=typeof navigator&&/(gle\|ing\|ro)bot\|crawl\|spider/i.test(navigator.userAgent),i=n&&"IntersectionObserver"in window,a=n&&"classList"in document.createElement("p"),o=n&&window.devicePixelRatio>1,r={elements_selector:"IMG",container:e\|\|n?document:null,threshold:300,thresholds:null,data_src:"src",data_srcset:"srcset",data_sizes:"sizes",data_bg:"bg",data_bg_hidpi:"bg-hidpi",data_bg_multi:"bg-multi",data_bg_multi_hidpi:"bg-multi-hidpi",data_poster:"poster",class_applied:"applied",class_loading:"loading",class_loaded:"loaded",clas

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	7.376279966987848
Encrypted:	false
SSDEEP:	24:BLnesPftbxYRHBmPrObGS3y6LQKea/A1c05vZx1:hnVHtCrmPrObG0y6UKV/A1R5vJ
MD5:	4A1E45E80D429FEF9DDD8D34D989352D
SHA1:	F61A1C2E9EE05236D6CBC89ADD14976EB05B6CD9
SHA-256:	56E24CDE5E35656334D9310A55EAB6C896396FBCC306D4AD3B89AF75877A5DE5
SHA-512:	BB02F4179D2CEEE31840183AACA364F211A2102F95D357C2AD576FFCBCC0CC33ADCF5300EDEAD3CF32573FA6151651FFF907F6D2133D7C2008B333BA2DCF8C2F
Malicious:	false
Reputation:	low
URL:	https://avatars.akamai.steamstatic.com/f61a1c2e9ee05236d6cbc89add14976eb05b6cd9.jpg
Preview:	......JFIF.............C....................................................................C....................................................................... . ..........................................(............................!A.1"Q#2aC.................................).......................!...1A.Qaq"2...B............?.....<....l.NZ.Ob8e.'j.v....UG..'...n.)@..m.@.........+c..;....sm.d,..R;...n.....}pi..4...[.o...NZ..=.w...I%..$I.H..WF.X....G.8nRAc.S..#:..&......b.C..8..&2.9.K1Oe+.n..1..M..m....?).f.L.0..f..h.1...(..zaW....f.w.b.ae....k,+..1.=....W..U$.....f..g...v...o..f..........j?.\..........;.(.V.]...~G.}......tLD.N.)...+..6".X..T...I$..x....;y...N?Oi.W.k.egQ-*._.Fv../.B.v...E.`....HO..r.s...k..Jp.&.T.......4_5.{....'..-k.....^h.._..z,DY#b..!.2.;m]Q..R....+.]$p@>D[5.....\|.b.)>....H..W\...C.Z..w4.L....F.cV(..H...E~...w.m;U.sj8ua.iBO..rGm.?....'+J.....jZ..i`...v..x.y....o[......Dn...v.......>.)><...GQ.....,u%.....[.J..+...D.......c.=..<..

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1001
Entropy (8bit):	7.736187805394931
Encrypted:	false
SSDEEP:	24:OUaNN3NzsUn1SvtUwWRhhRz0sQ3BZQIaY1piY:gzsrvtUrhiff
MD5:	B04B405838C3888822CD5136BCA5F3CC
SHA1:	664E1EA1B1E27DFBEA7E1F6426B4946CA74CE4EA
SHA-256:	81907733DBBAB7A1953C261ACC7CF568EC3CF9843D314C9652DDFC2A6F4C0616
SHA-512:	6023E49951921E48523E85C8BB71695C65F8E2531C823D05A154887167927329A93FB1A993CEB6CCA24490332F84D0A9F673DC3949C27A0CF4E9ED6FDC8A96AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx....,I.......m.....m;8...m....vG}.$.$u...O.-.....?/q4..w..j_...\P.._.W....8...H<.fE....`....9......U.)..../Is..........(..A.@.Q..4X...4(...w.q...C8..JwyF...W."&....o5{......F.{.Y............y.N..0.3.JV5..If.b.L.'......\.R4'.#..H`g}^..A.....=G..N5v..`P...WR......"....3.....C.."..`..O..s...V...?.....xEh....iyQ]......+2..=..A..\|....!._.#H.G..V1..l2.b.>.z.........E...?AZ~....G!.1.g..O`.X..;.[...mA.Y...A.m..$c......Q.... ..mT.2.[&lT...}..1...;..H.U..H.,..k..f.........N..0E.jp....kq&..........k[....Otl......@o2:...\.B....(........2.+..>./.S..A.....X.+A.....~L.`.\|........{.6..`]Y.9t>A\|...."..s.....r%..P..?.....4...S.I]..@..\|....'..0C...a.@W...Vh......G.(."..'...Ix7...`oWU..!.FX....D....m._...Q.r`...O.._.....eUu?i...\ 9..{.9....,.....-.i.G.....X.....~..P....^.z..`..._...].......z.s.m...Qg....}.DwACp+:..2......3.....}...\|R.L~..9.K...]J..k.(.U...l.g.K.O."..Y.....W....,...._...w.........b.........IEND.B`

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 267x150, components 3
Category:	dropped
Size (bytes):	6143
Entropy (8bit):	7.925373397404909
Encrypted:	false
SSDEEP:	96:26k2tgbb7SvWQgSw6L8Duk8Vee3NEA/IZLSOMojpMINbSRrcE3tRfZJxhkt5/QeO:26k2tgbb7mWdv6zrVeedEA8/MMRNpE3J
MD5:	C1B4555E33CE2CE3FE32DD477400F83D
SHA1:	112BDADAA09F84C4895E579DDDB9A14725D0AFE7
SHA-256:	6B3D1998489B7D15BF4590E2D90F4CB235337F78CCEBC79DFB4A5CAC47E1B166
SHA-512:	8EC0075535095A46EC94FA7C0F02B427C348645E875766113BB45B0785E6C612A547B4F7EE3527592A2E6E3E2CA5631D9859E9BD832655A4AE0368E0218DCC81
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................".........................................W........................!...1.."AQa..2qs......#$%3Brt..&57Rcd....4CDb.....'..6STe...................................(.......................!1..2aq.."Q................?..Z" ""." ""." ""./.!..@.2J........6.....Y.r..I.z.%...'.....`k3B....".)...e$g....6..l:.5..+O4....f.P:.q3..zS..^..O4.K#.Cw...s.I'2\|(=#....K...B.x0.c0....t.4\.`..\.oq..Y........4.Z....... . @....k..(..N..t]..q.==..0Lf.y.AA......a..Q.ud....w[YR_w.\..9.m...8X..(.....o;./..#....J......c.>e...]M..A.{.....[`</0i6[.h.}1...d.....[...GT.......y...3..s\|..o...:'...c.1i. .:.4.D...K.b..OX....z..L#.].....n.=..q...6.....O%.....~..$... .,E...7..4....^5.r.M(k.z2.8Vn.....f..e1....6f...O....*.Fu..t..i,43<.E_.......:.._..!\|.N'E.D.l=...V.......Q...................J..GtZ....Z...]......S...t...I..N

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4111), with no line terminators
Category:	downloaded
Size (bytes):	4111
Entropy (8bit):	5.195264917219664
Encrypted:	false
SSDEEP:	96:wmwS3E/clNZ6/BVcqHAAdMJ+T94MWSocn:vwTUHP6S24Mdoc
MD5:	71C31400A12073B7C576C903DCD8CEA5
SHA1:	2F048A9CA8727B169E761033B80209F53FFBF9F4
SHA-256:	6678F5308A4FD9620F440C3E6433920F9A09A9D6465A13888D9638AA23D70191
SHA-512:	98EB2820F7C92A8F0E01E1EA87FFFFB6CDF19311D4F5DC697E0AAAFA58A55180351A25776F2A8996A231A044F9D6317B09A1E910EDAC2C97A6A6F2EB4491E347
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js
Preview:	!function o(i,r,l){function a(t,e){if(!r[t]){if(!i[t]){var n="function"==typeof require&&require;if(!e&&n)return n(t,!0);if(s)return s(t,!0);throw(n=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",n}n=r[t]={exports:{}},i[t][0].call(n.exports,function(e){return a(i[t][1][e]\|\|e)},n,n.exports,o,i,r,l)}return r[t].exports}for(var s="function"==typeof require&&require,e=0;e<l.length;e++)a(l[e]);return a}({1:[function(e,t,n){"use strict";var o=e("@babel/runtime/helpers/interopRequireDefault"),i=o(e("@babel/runtime/helpers/classCallCheck")),r=o(e("@babel/runtime/helpers/defineProperty")),l=o(e("@babel/runtime/helpers/classPrivateFieldGet")),a=new WeakMap,s=new WeakMap,e=function e(){var o=this;(0,i.default)(this,e),(0,r.default)(this,"start",function(){document.body.classList.contains("no-lightbox")\|\|((0,l.default)(o,a).call(o),o.initSingleImageLightbox(),o.initGalleryLightbox())}),(0,r.default)(this,"initSingleImageLightbox",function(){var e;null!==(e=document.querySelectorA

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 447x500, components 3
Category:	dropped
Size (bytes):	27841
Entropy (8bit):	7.959320152655352
Encrypted:	false
SSDEEP:	768:0vl95kfAVxVh86Mexad5Cb1skXXOYGja7Tg8di:+ufAV/hJrxX1skXeo7Jdi
MD5:	5301018B89E2093EBC0AEDF302E6345E
SHA1:	CC0519DEE12847BCB4C39FE2A4BAA14925AA8746
SHA-256:	E54530A13DFBCF804BF01AD50AD845872E68CB60A6B0CA0BE5CF31D0604F1D51
SHA-512:	FDD15347BB01A8419668104E520BE56C49A2DDA7B63DC26D4A1B4404C396D8B08DE1523D9AB08581929A44888EA4891B5FA013F5C7D7E7F30506F66A79FCDFC9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"...............................................................................P.........................................................................................................................................................>~._...Y......Oip.M..@.....................q.d=.yv...>i.mz-g.c....jc.y~.{TYV................y.}..\N.:.r...x6.. .W[[...qr..s.......#.:.;Dy..-.G..........9=.......Z......O:.....;.e......-.iv.Dg....X.K....-.Oc.xfT..GWt..>f...U..f~.x.Ygv..,......A...k-m...O..eXrL.2`.?c..g.^z5.w}.......T...%.,..g#.m.......=>.dp.=&..z.C...Q-.^o.....D.>...v6w.~.....+...+.....k2.}6...V.X.6.N7W..=< .5.i.-..In.......O....f[....{.......:[........=...$.6...y.....S.C.@.\...z....:.../;5c.y...IuS..vlF.Y..{\|.q..V.n)..4..ovu..f..g..qy.pW.v.3...u..^.......+.u...F...5>.n......;.....}..".

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 267x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3742
Entropy (8bit):	7.946241936565909
Encrypted:	false
SSDEEP:	48:uEfF0TT8/e4LkVoeeG4eDcSYxn5zikPb3uU/mkDRpGM3Y7logl0D1hw2aJ8+gj9x:jc4MHDKx5Ok7DDBHg1J8l6VZ+2ztrQ
MD5:	CA3016A7B6C06640C696E133A3663D83
SHA1:	43B6F529816D2841226613B9F2B27F1861A46B1E
SHA-256:	B0CCD7F3ABEA7F43ED99E45A817DF261671FA37C04B8388AFD4FBECB564A82ED
SHA-512:	FADD1FAD98E38E1AD1059D1E75FD1298AE22D30E32C875971EC3F00A1DDA0EE7B903588CDA4217FB56E19C19F1101F2BF006F88FE1093AF7E45C1F30D34176EB
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/2079704/CqlfRiIvmmNbyB9_IYd8tw/wy150
Preview:	RIFF....WEBPVP8 .....G.......>Q".F#..$..k....in....6.(".4...Sz....\...\|...l}.?R}4..\|.0\|...#.[/..o].....#...x...._...}...j.......}W..?.....=......G._..._.}m=..H.5.......l0\|.....5.g....Z.0.e.Q..}.....gn.?........m..@cc^.+G..e./..P{Q.L3.Dq.r..Uo...r......./b.....N..eS..\|..P...FIq.#.].}=...u'...y.[...$...Dl..........'.......`...K......_....%.L.w<....UgHw..t...........oK.......T[...Gd.q.......R.[;~.u..3...Y..q1.Fbg,..&.....eJ./.......J..+M....c...@.3..k#X?\|j..A..U.OE\h.?.~..+..g.z.]...Mz....l.h.~!.Zu9..&....U..O......./.Ng{...MChb..DI.Y.sW...V..m._P')....Tx..0e.v...E&@3.%........'..\|..~t...1.......j.....e..U..K....s...>..W..b....=.sb0.....7.......5.......U+...{.\|.?....B.oc!<.}...q.by2.S]..+.QSi..E..]...c.+....w..{...J.....kT.d;.A.n..#l..;.L.%.s.....e.o.S.gKqO z.Z~u.-(...oIw...%.eh#T...Y..c.^.a..j<..}..&...;r...9..!.[.e....>.T.....EO....R.........8..f. .%.2..}....Z....N.8@.....Q.....%~.zw..H.f.X..I.......=!(..e..RW&&...T2....9...

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4190
Entropy (8bit):	7.953180940050557
Encrypted:	false
SSDEEP:	96:gEehpzZyzL0pVO/GFnRswCT0UesxJ7Fkd8sx32c3X+HTCRDMxv:gEefzZyzLQnRsn9JZkdvmfzCRW
MD5:	1E311FC3C148B9ED7AD499B30F6AE9FC
SHA1:	CA4A5CFADBB5654A18F27168440A78A9589F1D4F
SHA-256:	716F810BDE4666AA4F01BAD9DAADB27128748757840AFC42F1306C7171C534A9
SHA-512:	63F55C7EE6D8789702F3EC0D2A915378574C13AEE8738873A62790302BC6F57380B8578613C1832C333691AE84AD583B6665DB6BA656DB542381A645B2359364
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/5146926/qZYz2rttzhVwcK8Dsm8bag/x180
Preview:	RIFFV...WEBPVP8 J....S.......>Q".E!........YB$....O~..tr-.......`^\|.g..=)o7.......7.-..g.W...v..9..?....u.......#...f.Ad..Vt...O.t.....x..[j.u...V.9j.<...q...\o.7..;T.C.h. ......v.o......S..\.)...6.S.l....a.??..X..."A9..!..1...s....i...A..W.g?.W.....n..3....K.8]1.b........Ew.._\|.+...Z.!..e\......j.{.@N...$..p!:rmgt.x+o=....,...p..4e....>nm..jwD...o.P.z..NUo'.G.r..$..Py......B.{EG..............T..J..M="}..p.<s 9..3.Tr3..z.....sNv.h5.R}.m.?_..d..F...K......<....[q....\| .8M!.\Q`.s...;75Lt.Yu..&2[....Hz.v....Q~.k....M....5W......5F...9....T.G..5.T..Z...O..2J.Y.....rn2..Y.-!S.i....-mx......"../B.....Yp;.(.C#W3S..F.$w.. ...Zg_...o...j....-....E.d....W..>.v........A8.....S6.X.m.>...Z...G..YxC..~....a...T.1a...).K?......!..mY.N..].*..B.....+......L.s.8&Vj.`.R`.q..gR.k..{......0.....-...i...[....'F..)b..L.^..o_..qK.@y.@n.\|.;0....`f/...C...4uu.&0.o#_))[..e..k.._..&.<l.W......m.(..#.1.h8bB&h.U...Y...o.SQIB...!.^...Z.........r}T.&J:g...w-.Y.{(PQ..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	5896
Entropy (8bit):	7.917045925140346
Encrypted:	false
SSDEEP:	96:CsUVpJycYDV6QaS3+asxsOfCZTQaJ0kiBKH0b61MJRS8k1gV1rW9sxVjI0AE1yDX:5IpViV3aS3kxsLTQ7nBKH0bgyTk1WWCW
MD5:	76A3178A5D297550706175B1E7DC3C36
SHA1:	EDACFA640C584817B453A269331638FC9F5B0CF8
SHA-256:	268D90C9156A5DFDA7062940F345539E3A8DD85734723636D475637D5EA7E02B
SHA-512:	E9F094FAA7D80B4B444B83F61611502B85CFFED986EDDC55CB124A7EFE7F499E290B954C434666BD1C70C10A6475E83CFE34819E4A8768C0E269DA6127F0850A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................E........................!..1.AQaq.."2BR......#br..3C...6...$4Scds.........................................................!1".AQ.2..#aq...............?...(.K..H..RH....H..B..I.. .I..$..l.A....(..Z").RH....O.H"..".E9."(..Q.Nb....-(.V(...QKQF........(P.......4.K....Q.J..)....I.bh..QP....DE..".E8i$P.dRH.1DE.5.,S....#...`R.P.......(.8.K...XP.C4.#GDi.M...zRM,..;*.3..FI=..U....i..... .^f...\.Y.;.,.nt^..5.....[.2G........j.\0h..>.8e#....&.).M..Rj.zf.x..K.i....I#`...Y.8...f.8..qs.h..H..1HN..}....y.GV.9VX.6'.T.#J.."qI".Dh....b.J...............T.Z.H.`...Q@(.0(.;..$_W..L_=.E.(.<.3.\|)..qB.?.`..1.6 .B.b..U.H %D.c..q.,..{H...x."...DL...3.L.u.v}..".?....-.\j....... ..h.?...^..)9{v1.N..?._.k.....H8I...B..L..U.T...^..&N. .....U.....&..M3.{7..t..i..odV.x......<}E`x._..u.o.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 166x200, components 3
Category:	dropped
Size (bytes):	6551
Entropy (8bit):	7.885305845437536
Encrypted:	false
SSDEEP:	96:B85eB8NVYNyHOIBX6CIZ8lDGXmsmVDcWVkrmLFQ0qcF4xPMBwvM+gKyq2Gz2R7:Bm1yyHO86v8ljcNrOzF7ek+ghHGc7
MD5:	B29A800B3E6180393DB0B647D5B3CCDD
SHA1:	2B0EB9C0209153A6F7D62D601035010932CC67A4
SHA-256:	4D72142E3589D2E4DD6CAA7E0EB414746A437D6CB58024CA398C639D2B86193E
SHA-512:	84016CEFF8F29BD0D5D85D0A1C35712CC7AD64626CDA283FC548CF462ED997E4984B07AD75209D3C63AC10C4464BEAA9F50883464FB30D0F935EAB4BFBE5320F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C..............................................!........."$".$.......C............................................................................"..................................................................................!r....`...4...a.(%.&6:..ccF.....a^...Q)E.&.6.N,....2n...$"+..M.h...h. ..M..Y'..qd.....Q.7.RhF bc.5....}..$..Y.+.q6.7.t.;..~-...\o.>...:.R..8...M..N,.....W..N./u..&...,.~.a..K.f.O6~......:o.]T...?.4....m...%s!.yp\dI.Qvv\|j...h..GY.P...O...q.....4...Y...N...B4.a....P.]u..s.........6gi..........{.....&D..Y&0)..`P"....=uZ..3..>v3.}_,......#...y.X.y.K.i.k8..a.:..~..f.c..9.{.6...n...C/..=..YeG........<0,.Z......P....z..........Z.\...<..6.]..2._........KT..4........PG0.ds.9..................................!0... "@#25p.............AK$.?....p ..$]c..PL....F.C.._.d-.4. ..K>.-m)@`.,...L.T...>m..;.Y...}.U.N....0.5....Y_)....]V*.._e..(....el.q.t...W.=...........Pn.........d.f..S.]M.r....gR/..a..6.R.0.2)-a.._

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 200x189, components 3
Category:	dropped
Size (bytes):	6749
Entropy (8bit):	7.86998648884674
Encrypted:	false
SSDEEP:	96:cd8F3bh95UzEvzWYDQK94pIcE8O0Nr8KF1LEoJhsSO0sOJyW4L85f+6A3/a7F2r7:EJErcDDfWSO00W4LYW6A3/a7F2r7
MD5:	BEDAEE6F31FBB2E5C17B415BE4BCCCBD
SHA1:	3E4DE06E217C4E157A2967FCFB606837409860FA
SHA-256:	E7D3CFD3A1E2C82A333BB04A35822416F44D7C21781E3DD1000D338B00363496
SHA-512:	0EB5F7DB01BDA4474094EB21B27441440E47B1382A74149D2250B827EDB0FDA39DC444143FCFEF676D7970C758CD6D83968E63BFE31CD8A9222A7D4E9BF0F8A6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"............................................................................................................<...diz..;s......6K....."...1.;....Z.[X.Ev.:^{.~.-N.E\t}.Z.M.f....V.Ok[.{../8.G...`.....M.~.=7...qO.u..'..-.....=......;..Ok...+..`...9u~..y...u..,.z.V......$...!......`....`.y.J.5.9uc.o<...A...?:{.._.3e$f..O......a........x^...._.....\|..o....O./..I.\|+...7....;..W.....T.Qn.m...-.m.^....v~T.....t..t.o..MZ.9.^RVl9yu....Z._p2.%t.3Q2.WE&lY.......\|.]W.Y...^.`k0..R...~......E./..Vw.>t....u........K`...~....{'....s...5.(.f.P............0.............................345.!$20.. #1ADPp..............Q.K..V'........+zN..B.:..9.S@.\.....39;9y.$j(Y.F`.K.....h...T.`k..5[/x..S....1...."..X........c(b75.7..u...y.X...`.{.F.S..".6....*5..W.U,MWO...d..Uu)F..q..'....X8...k.i..'.8....g!.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13182), with no line terminators
Category:	downloaded
Size (bytes):	13182
Entropy (8bit):	5.180811169218976
Encrypted:	false
SSDEEP:	384:o/IgkieZ/SjegkvgvQGpXJ3eYS3kY+bGEqv0s+pfYm03pYSoAk:o/IgNQ/SjegkvgvXqYS3kYwpqv0s+pfd
MD5:	83A062CF6545B990C13B4398035A29D0
SHA1:	5CF24BC45FCBC6F416EA9671E089CA00EF0080D2
SHA-256:	7EE08C60D39F5712A56938FDA3E2AB10FE3EF23EC98AEB3C9A29E54F6F31FFE1
SHA-512:	27525A61C761C350254C39A101628E0F090B3B7F2EE42301F3D34BD462DE05F12A16B8C94D8C4F7E6FAD6C35D30CBD8193594D3D6F0DD18F8F089EDEF7D5AE94
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/js/index.js
Preview:	!function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},a=(e,a)=>{const n=new Map([["init","init"],["validation_failed","invalid"],["acceptance_missing","unaccepted"],["spam","spam"],["aborted","aborted"],["mail_sent","sent"],["mail_failed","failed"],["submitting","submitting"],["resetting","resetting"],["validating","validating"],["payment_required","payment-required"]]);n.has(a)&&(a=n.get(a)),Array.from(n.values()).includes(a)\|\|(a=`custom-${a=(a=a.replace(/[^0-9a-z]+/i," ").trim()).replace(/\s+/,"-")}`);const r=e.getAttribute("data-status");if(e.wpcf7.status=a,e.setAttribute("data-status",a),e.classList.add(a),r&&r!==a){e.classList.remove(r);const a={contactFormId:e.wpcf7.id,pluginVersion:e.wpcf7.pluginVersion,contactFormLocale:e.wpcf7.locale,unitTag:e.wpcf7.unitTag,containerPostId:e.wpcf7.containerPost,status:e.wpcf7.status,prevStatus:r};t

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	342
Entropy (8bit):	6.996524441522557
Encrypted:	false
SSDEEP:	6:6v/lhPKqHVqVNWlW0QurrSkJAMNU5qgoaGGgTTfElmbssLzSrLvHX7Rmi5IgtVp:6v/7ioVqKHrhlU5qgaTftbss3ALzRmiZ
MD5:	41643E4541837323EA07F3523FBFCF62
SHA1:	DAF2C85C4D84F4837618F85319EDB053F94222BD
SHA-256:	0F38C945F9C9A76777F210D4E6F14A0D3CEAC2BD73E96947951DC82786191F29
SHA-512:	AF032FADF89291B76D21E6239F95ECEC95080A6EF8EBCA6EC7E317A0698B76D4252A54F354DDBF18E480C84059CFC3512948EFC89E6FF654BA9D3FF95A7B2F2F
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/sportmen.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx.bd``..0...a....F..BH.....^^...y8.s....%.ws....&........ n=.............!...x.4?73....-...lD.....e........{..8..L'....(G.0.n..I.8B....Dt.c0}............`zV.4.....L.ip...?!...=.......!@9hO....ab`.s.k......x.......^.#F.A..\...........h..B..5iv..\|..7.$..G...p.g4.Q..........SF.c5......IEND.B`.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24505)
Category:	downloaded
Size (bytes):	24538
Entropy (8bit):	5.211781970572869
Encrypted:	false
SSDEEP:	384:ywuROBKfFsDpxaPLQtjrdTEt3TE/dWyxml4qgpw0gh3LBNO+e:zv6KQLQtjEGdWyxm+4J9NO+e
MD5:	66C81E96D1574C9F51EB3D11978EF007
SHA1:	C755A3F4248F9BF314DB9D8CC772B1D29554B855
SHA-256:	37F1E1DDC606EDBC65252667C8328137F6368E4CF3CBD3CEADF6C363497F0FE5
SHA-512:	1D687DFE62C9CE23A5B505662CC6F21234186048E14E2E6CABC1F23F246604F0146AC092145B5D2539802C80037E05C95D270E2DB6E9347E3423F6358AB5A3EA
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/937691/a6a4b083a73f3d813a26.js
Preview:	/! v:937691 b:default c:4115 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const n=e.toString();return/\[native code\]/.test(n)\|\|/\/\* source code not available \*\//.test(n)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...n){let t=this;return function(...r){return t.apply(e,[...n,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var n,t=Object(this),r=t.length>>>0,o=0;if(arguments.length>=2)n=arguments[1];else{for(;o<r&&!(o in t);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");n=t[o++]}for(;o<r;o++)o in t&&(n

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yandexru&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3547), with no line terminators
Category:	downloaded
Size (bytes):	3654
Entropy (8bit):	5.122413008829404
Encrypted:	false
SSDEEP:	96:5Qz8QlKTSiIbTb1uRXLsJPGKjFoaGwHUoUZW1eM7Dw6R:5Qzzpbf1uBLsJPGKjFoaGR7ZW1U6R
MD5:	612F7BA565EA23B12A17DC5F43087FDD
SHA1:	366EFEA2336B140FB74571FBCF539C2DF22E1EA7
SHA-256:	56A58B2A7D081644ADF703DCE04831D310DE1C8971BE34EB26C257866AB806A5
SHA-512:	5D9F333C0054A2AD53473347B0D8BB1332CF2B0F6DD3D4E4EF208D30885FA28B34C3988B9ABE9F52CD0700F3674C551E007BB94CC35D282894D5872A908F77A8
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js
Preview:	function YmEc(options){const self=this;let products={};let cartItems={};let detailProductId=null;let currency=null;let hasActiveVariation=false;let sentDetails=[];let dataLayerName=options?options:"dataLayer";window[dataLayerName]=window[dataLayerName]\|\|[];this.addData=function(data){if(!data){return}if(data.products){this.registerProducts(data.products)}if(data.cartItems){this.registerCartItems(data.cartItems)}if(data.currency){this.setCurrency(data.currency)}if(data.detailProductId){this.setDetailProductId(data.detailProductId)}if(data.hasActiveVariation){hasActiveVariation=true}if(data.actions){for(var index in data.actions){var action=data.actions[index];this.send(action.type,action.data)}}if(data.purchase){this.sendPurchase(data.purchase.actionField,data.purchase.products)}};this.registerCartItem=function(hash,data){cartItems[hash]=data};this.registerProduct=function(id,data){if(typeof data==="string"){console.log(data);try{data=JSON.parse(data)}catch(e){console.log("... ...

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 180x135, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8908
Entropy (8bit):	7.9757036614406145
Encrypted:	false
SSDEEP:	192:XJmbwF1azk1KlrX59i6uomq2eCqSUh9czaV:gJzkclrXmomKNSUhJ
MD5:	84A7947D0A6CF2AA7FDC202EE049CC53
SHA1:	E44CF985706883E18ABE076F896971A55A4B76E5
SHA-256:	9E963CFABD125DDF0B97784F53CC72F8E8F9DE899B731C8D3230E3BE6A3B6524
SHA-512:	CAEBC8E09C602EC3E7F7D492E77571E58375368C1C8F359A4DC914F275400BA55C593542B07F7F2A5C76EC97730DBEC17A9B9563901ED3EBDA450DEB3766B030
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/5146926/ET8mENn2OZUHkOQLCeV7_w/x180
Preview:	RIFF."..WEBPVP8 ."...s.......>M..D!......1,..^......m...}.}.P?..9.^U.....;.W.....?.....~-\|....c......P....~.{......E.O................1.Y...........^.._..J.K.m...o.~..~....5..........?....).......^..%.W..~n..?.........G.._....#.......o.~..g.}.k.....?...............?...........O...i.."....'.'........,;..9..._.S..,..h..[..'.H4..N.g...a.2n...._..s..N{m...J.fMPVe.;L.@...R..a..-V.a..H..=r...f..e/....O...Z..l.h....kN..x.y.........(...'..mj9.....p.n.......b.......-m`...>vd8...%v.V.M..s25.oZ1...........:L....7'..c.i......Y.T.#..D..U..,3....3...%..~m....r?....=..6.....y.m.....t.....k~K..Sb.T.....\|.;.+.0.i..._..%.N].~..f.vbU.JI.!.S.E.,..V..{..y@.$x{\..&..j.U.n.r...v...j..O...T.MF.m.....9..4S..w#yP>rUz..D."..7.rH.8.Z.H.D.%.Y.....4....c;.......6.+.+.BX..G.w..'.=.Jb>.............9$y;....U..};.......Wx..d..b.....E.T.............!....@....p..m."8\|..u.....y.H4..?.C{.M...s.o...l2..ZK.~ .p`...9W....;z%b.sV..k..#.H.........9..~.G.O....f..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (536)
Category:	downloaded
Size (bytes):	1916
Entropy (8bit):	5.501554624528962
Encrypted:	false
SSDEEP:	48:pffHsDePQb4I4UI3MKd58oxMctmCgrAvaTj:JHseg89v4
MD5:	BF29FC43BC107F6B16C0144A2EB97248
SHA1:	27F0620DCC5BB6A50751798A63ADEA2549DEC5FC
SHA-256:	7DF4AD4C074A08DA990FB11D3A0EF15EEED691E2791ACC040342E0A79EA06370
SHA-512:	601A0201ACC83FBCFFCEEAE9ED9D0C72DC6E4771C379A2AB9D9DB58DFC534A97CD7E45CC5879F2E6D0B112D4A56E3225A71FA1379EE24865CFA8124E317F0D79
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/metrika_match.html
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Type" content="text/html;charset=UTF-8">.</head>.<body>.<script>(function(){try{(function(){function n(c){function g(e,h){var b="sc.topics-response"+e;c.parent.postMessage(h?b+""+h:b,"")}c.document.browsingTopics().then(function(e){return g("1",JSON.stringify(e))})["catch"](function(){return g("e")})}(function(){function c(a,f){return function(){b[a]&&(b[a].timeout&&(clearTimeout(b[a].timeout),b[a].timeout=0,window.parent.postMessage(["sc.image",a,f].join(""),"")),b[a].g=null)}}function g(a){var f;try{if(a.data&&a.data.split){var k=a.data.split("");if("sc.images"===.k[0])for(f=1;f<k.length;f++){var d=k[f];a:{a=void 0;var p=d;for(a=0;a<e.length;a++)if(e[a]===p){var m=!0;break a}for(a=0;a<h.length;a++)if(h[a].test(p)){m=!0;break a}m=!1}if(m){var l=document.createElement("img");l.onload=c(d,"1

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1034
Entropy (8bit):	7.766616632365276
Encrypted:	false
SSDEEP:	24:3/yxhEz+MeT5Mv9Elbo/hXimICMZ1fjVLZgXuDjcCy:Pyxho+MU5MFV5imyHjBIuDYF
MD5:	1A055BFA3FBB0812DF2C67D617A14AB2
SHA1:	44B829109D8158D1B1BB901C41FE1114049E686C
SHA-256:	DBB14CE8C5346B7513874EB7FA66F24192B0C3A498E35081464409887B7A49A7
SHA-512:	B5E368CB2DC88F38C211C808EE966197455E9BC8B0889B55521995EEA49E86E51AD4CC7B292196553DB5E14D4C7382B929DFE2B35DE216F9097B70EB38286301
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx...C.#....$=.t.=.m{V...}l.m..f3.:........S....[e....2..d.Z.1.v./e........l.........%.v......E...q...tg..."..\|....;N.+...y..R.... .2...W+.J....@........l...U.^s^....."..I.C...Q N..7\Ao...Z..w.E........p.#..q>+....I.F..1...p.....Q\.....4.yB".2.W..AT...&.+.g!..0.5..-..$1/1.Wi.3...'...?....QS..7....._....D....U\K.M<.tR.F#b.Q\.....;aA..g..6..+Y....6..W...w.....{..TKy.p*....6..JLg2>.@....2.........BCa.6........%..<].......$.....M.1..Q.`.k.m Lt.Zb..T3....s.<K.....0[..(..r.%.....@.1,....1..0.D..VrxR.rm....3Q..>....I^h....I.@..sE..,TC...L.Iv;.(.......p../...R...?.^..@.L.w.[CY....~\|.:.'W.(.....V[).3.](O..+.H...3...........E.w..\N.....9.....q.s8.r.3.......R..XE...D_.3.......X..z.g-...;....a/.....8./s.C...9..T...._.'Y.7.y...).2..'dY.J.T.....?$.fI.9........ci'G......s.78.q)....,....#i~I.....HK......s...b..Y.-4&u....kHq.5\C3UL..p.:....?.T.b..`_.......u..W..f.?.1.B.W.;../.~;..?f1cv..H..GI.br'

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yandex_llc&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2894
Entropy (8bit):	5.130108035080603
Encrypted:	false
SSDEEP:	48:HrjSTxswDB/P7LUS0BvpKkR2/HSXmpgMPnfFrYHe1rcYlX3orrkdEv4Hm6Hid:HC+2/Vpb/flue1pFdEv4Hmo0
MD5:	3FD2AFA98866679439097F4AB102FE0A
SHA1:	DBC9C4139E49D0D9FB41B7191AAD1A2DB6C555FD
SHA-256:	CCD31FFA708D025833F954B3E0560CEDD58DF9A0D2706B2CCEE5F501C5B2467B
SHA-512:	82811EF42ABD80CBEBD4A74D35475FC3871478FC25A486B08BB7E04921B7824DB56C56B2191E9AB56A421552B483A2E64F966396711E5F248AFAE9D1DED22CB2
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/css/styles.css
Preview:	.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..clip-path: inset(50%);..height: 1px;..width: 1px;..margin: -1px;..padding: 0;..border: 0;..word-wrap: normal !important;.}...wpcf7 form .wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #00a0d2; /* Blue /.}...wpcf7 form.init .wpcf7-response-output,..wpcf7 form.resetting .wpcf7-response-output,..wpcf7 form.submitting .wpcf7-response-output {..display: none;.}...wpcf7 form.sent .wpcf7-response-output {..border-color: #46b450; / Green /.}...wpcf7 form.failed .wpcf7-response-output,..wpcf7 form.aborted .wpcf7-response-output {..border-color: #dc3232; / Red /.}...wpcf7 form.spam .wpcf7-response-output {..border-color: #f56e28; / Orange /.}...wpcf7 form.invalid .wpcf7-response-output,..wpcf7 form.unaccepted .wpcf7-response-output,..wpcf7 form.payment-required .wpcf7-response-output {..border-color: #ffb900; / Yellow */.}...wpcf7-form-contro

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x188, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5674
Entropy (8bit):	7.9604012213215505
Encrypted:	false
SSDEEP:	96:fjvBroTkHmu2n3gK8Dbdr2YwFG+oFvkB9GPq9r3X4agnzsdzKwOGTX:1PGjCprAVnGU3XazSzKw3TX
MD5:	623F6EF535A7D060E386765A663D1AB3
SHA1:	AD6958636DF22795EA7792B4BEEE63EB714F9588
SHA-256:	2DEC1C5B17E090B6ABF0868274A10A98478B43E1B4F318738AD90344ABFB0459
SHA-512:	069C0E06AE0EF7235D569B13C29FAB13192751D268CFE1FE86F0CF795C704B7BCB596D4DA512C1939342330941CC34A1156C29E42B5AC6580472A212E20FFA81
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/big
Preview:	RIFF"...WEBPVP8 ....PW.......>Q".E.......A,.......'..x.t....'...............]............xO.>..9?..6^..(.\.....?..../^.w..._w.....w{. ..........._........^....S......y.....`?.o-/./......a......yO.m.}].....'....-...5..;.].ys#o#.x]<)....!....L.....W.:.....G..g..DK..9=.)9.r^..`l..@..^.....a>>.`k,....k.\TN..;`,......B.o..#._....RO.5v=2..w....[.)wU........A.2!..%".\|.<[.b.L...i...vD.d^.hs..g.d4.\|..F,...i.zS.....FO!... 4pU...2.z..7O...\|.>......p.:L..?q..>.~,.....b.....C.0.j.....Y..MnQ.h....>...FN.r.....hp...i\|..`.k..Tp./t.....7.....d...$O.z.x...m........^..X....7...N.....=.....a.{H..Q...<..{.{..T...3X'...Y..c..a....#.R#.$....I:.{.P.......Ws...a.j.4..'X.`...M.l<.>@..M/..2......./.....:.......D.....'.N...8"pD.....'I..{.eU.....8....K#....@E).i.>...).g<y..!..t...?.=......^.3.[.,^J9-.Z.....'.........C....X.T<+.M%...O.;.......,.....c.P..d.>.A.}]I\|....x../b..w.1DpJ.eJ....... @u..-....j .B..v<..T.X.A...K....V...XE....+.n.n......bm A^...i.*.u..%%$F.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 200x198, components 3
Category:	dropped
Size (bytes):	7936
Entropy (8bit):	7.902905990884806
Encrypted:	false
SSDEEP:	192:c4jgmtLo919AvKB1Z7NDPMFfZGqJ2d1UBeoT:cO9or9VrZ9kFxaWBLT
MD5:	25DC9EF7BC24552B45ADAC2F485964FD
SHA1:	7B654EFD29F76FD1D91D48ADCEFA4CEC8F802DA1
SHA-256:	EBAB6E3E1CA51B19FF35D74ED9BB92736A79C87E77989769C164009EB86CDBE7
SHA-512:	180B3E3DC3C341EDB1F1C83F478958F3B8443370E171DE9ACAD062C4BEF4BAF0D5CCC6D5A8905E5D2D206EF78C0DB6DDDAB53047DFECF9A8BE9D4088ACAC286B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"...................................................................................................~...........4...a...).i.}...S5v.'.N..G..]sc..;>....($-..ty.ju.....M[,n.Fz..q.z>.._.N..HR>WK..rw..c.>.....EI.U~..?.G4.......^.d.....e.......u%#-..x...sx..w..1.d4...:..f......c.".z..-.........X....&.Yw...k.._....3;..x.g..@U-uC.J.J.a,.....>.b.;X.w..5..f...W...g...3..k.....s......1.... g.......+.{l."...+......g&....0&I.R..K..N.P.&.w..V.U.[..^ll....ya....'..03.\|..4..z..Ny...]#.1.wU...Wr:.M.i.w.f.?~..#;Q.......U....M-ra.Uv..z..G..y....G......z.....>.\|.{...RG.....^...}..lv..6:.^N.N-...#._.G.u'9......+.............2..............................1345 !"2.#0AD$%@Pp...............7.....y......p.1....\|]2Mj.EcQV..N..!..!...I..2.....SZ.i%....Lsp. q..!.v......Ug...P{P2..`.[....G!+j.1?..e.<...N.1

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 200x188, components 3
Category:	dropped
Size (bytes):	6126
Entropy (8bit):	7.857306205306555
Encrypted:	false
SSDEEP:	96:NgICpMlDifUspndOh+CFo8RWcPr2FgB3ziIu0x7pRdREx2zM/4KXk67sM:WwSBdOh+B0y6B2Iu0x7FRLzMgKXk6QM
MD5:	7E19B0B56D73B069688796F097BBB47F
SHA1:	5326D542BDBB99192F079F3395D1A545D8F93AD9
SHA-256:	6E1CE4E37B8140702D6218747436EA737F8A49A958475610802EBB353568C6E6
SHA-512:	8B1B40510472C7C84234B81F1F3F5D045A4C03FE2E37B5BECDA7D80DE9E73B833F827F8BCAE32AEB1DACC3015617B8F0EACA7145B5118518F67670EA7886D14B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"................................................................................................................Ni-...%.2@.........^ltLZ.....[2[\..<.9.c..pb>.p.iu.6..&......9.5....~!]r....~.E.....X...Mp^.jl"`.".l.\|.'.o.#)..b..^Mm..+j....G..I...gX-.....G.N....n...4.]z.Y...Y..>[.g...v..8.i.....X.....l.i.fV...\.!..J......1....=...$.ly8...\.\.Un.c...n'b...p....k.....6...:.u.S...\|o.a.:9..\|........V<'...Ms.`....>......)-...y..6K\vOi.=.....a..O.;,[iXm..[...n.9.wTC..w../..O...#....4..o%."u...E................1............................!34..$05. "#%12D@`p............4.w...#:P..e.^m.H....$.!E.g4.V..R...z...~.....l.x.>.p...7.......ze.T.P.W.P.....8>E.N..i..Mj...N...%..,cZ."./.....31a..G<.p.F5R.S..H...c..v.#v.8...nB.....u...-...Y.Z.Uf..].;...[r.(dp.e..c}.Fm.I..;..G...V.......2b..HR.=\|.A..F2

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	7.736187805394931
Encrypted:	false
SSDEEP:	24:OUaNN3NzsUn1SvtUwWRhhRz0sQ3BZQIaY1piY:gzsrvtUrhiff
MD5:	B04B405838C3888822CD5136BCA5F3CC
SHA1:	664E1EA1B1E27DFBEA7E1F6426B4946CA74CE4EA
SHA-256:	81907733DBBAB7A1953C261ACC7CF568EC3CF9843D314C9652DDFC2A6F4C0616
SHA-512:	6023E49951921E48523E85C8BB71695C65F8E2531C823D05A154887167927329A93FB1A993CEB6CCA24490332F84D0A9F673DC3949C27A0CF4E9ED6FDC8A96AC
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/laboratorija-krasoty-must-have.clients.site?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx....,I.......m.....m;8...m....vG}.$.$u...O.-.....?/q4..w..j_...\P.._.W....8...H<.fE....`....9......U.)..../Is..........(..A.@.Q..4X...4(...w.q...C8..JwyF...W."&....o5{......F.{.Y............y.N..0.3.JV5..If.b.L.'......\.R4'.#..H`g}^..A.....=G..N5v..`P...WR......"....3.....C.."..`..O..s...V...?.....xEh....iyQ]......+2..=..A..\|....!._.#H.G..V1..l2.b.>.z.........E...?AZ~....G!.1.g..O`.X..;.[...mA.Y...A.m..$c......Q.... ..mT.2.[&lT...}..1...;..H.U..H.,..k..f.........N..0E.jp....kq&..........k[....Otl......@o2:...\.B....(........2.+..>./.S..A.....X.+A.....~L.`.\|........{.6..`]Y.9t>A\|...."..s.....r%..P..?.....4...S.I]..@..\|....'..0C...a.@W...Vh......G.(."..'...Ix7...`oWU..!.FX....D....m._...Q.r`...O.._.....eUu?i...\ 9..{.9....,.....-.i.G.....X.....~..P....^.z..`..._...].......z.s.m...Qg....}.DwACp+:..2......3.....}...\|R.L~..9.K...]J..k.(.U...l.g.K.O."..Y.....W....,...._...w.........b.........IEND.B`

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1638
Entropy (8bit):	7.837357304714615
Encrypted:	false
SSDEEP:	48:0B60t3/4uMI299DyII1YBuJ23NZtg6Rn4E4pA/lwaJ:0cE129lyPYBuJ2vOon4ETl9
MD5:	B29BD2D5EDDED5234F002DBDE1C4EBD9
SHA1:	5115E99A541B7DD39E96C46937FE0AA2D0AAC0E2
SHA-256:	8CBCFE75C9B948924F8C397BC9FCB2C361A2428001B0BAE74D814A932A6334D6
SHA-512:	D9D965A4BD692B2B3881FBFCF0AA4900B9F3FD0BE0A934EDB4580A301BF95294CAFFC93B572BEC2A532AAFABDCCB6A27E3CF82817E4E2A6B10533DEAE30B0C48
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/expert-massage.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz....-IDATx.....J..{.....m.6..m..m..m.m..n....[...=x.og..L.t.t&.2".L$..^[E..!U..<..6).........KI.!j......(..^.h...C....J.^.Z>...m[....#......x},2..F...`..1$..,4....H..c.U-n.....~....M!.e..Q.t....#.m.)v`A..WOD...-...a...>~?..0`g.;.f$^[w.F..Im...#bo.<..M..G....K9.....a.k.#+..^1<W....`..JO..=8....s...<y..6.5..\.......P....3.#...=r....7..#..Lz..r............k.....k\Y......Y....P..Ck..>\|S..[....).N&5j.=o......C....:0A..~..7F......</-6a$..97..p..."...+..l......q...p.I.2(1....U0].S..}/...9........Xq......mU.........}.".....OT..O<L".W....~......q.}...7=wIG.E..!z...d...q.q2N.x.\|....O.F.\>....6..{.........<;~........h_.cH9...Hs.F..@)......\|../'.Jm.P...9......"......O.;b.m...iT.mSP.dg.(....tr......P>...P;Nr-.(...".......n..........v....144.#L`1.....tTq..U..%....w.[.f..`-.,........O..].r.. +.....$2g.+`....R.....?(...'..2f.y.9.D^<.BI.Bc..6.5..(.Ra.4..,7@PJH8.J...Qmxr.......[.sxp.T..%.5e.E..z.T.{6.......%.8..K.?@..p=..}.x.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 500x488, components 3
Category:	dropped
Size (bytes):	31092
Entropy (8bit):	7.958739589342385
Encrypted:	false
SSDEEP:	768:K56joQy29Xn7gLmb9kwtn45BlGigqdNF/GOwmP:qeX8Lm6qnCBlGajFeOzP
MD5:	57FCFA0AE7FF7C63E045551F601B3E4C
SHA1:	5F36366C439516E8D9C907B7760A5F0E1810030D
SHA-256:	3CEB69666B31C6597C5FEDDF2076633A5BE942430B80D269BE47D6E47584B42F
SHA-512:	B3F51CBD198B0AAF0BBCA00F5E117027DE3F4FA1E043F658F2EA787983C2901F6CC1AF45DD911C515EB0D00AE96123E4703202C1731A97024133B5B3525BE5D0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"..............................................................................P.............................................................................................................................................................................CW.............3.G......@v..@..................#Z>..u.....m.]=..KO...v0.C"..4.....W..;...%.$....@s...................\|...mV._kF.z..}.nz...a70..1e..u#.gzH.Q....t.....$...>[>.x4.S..y.uT..........&O...I<i...K.e;..v1.-..w.'E;..l/Z.\|..m\|.m..LW.%.h.[/.z..yE.....[.NO.+..3.......>.....'.]j.w...j.t.......k..tL[.jjF$.H.C.....mkY....y....o1.4....oY.[.Y....s..o'._M..;..miqe...%.K.<..[jV../..[._....'..2..]oRWZO.6.....U.....}J_..kA......?.c^]...g[53gV..S...v...{.g+g_c.%+M...='.w....>.}/.....m..-.,....:...).-..Z..%.)Z..>....b.[o..7.7L... S....Hb.j.R...)]...

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1164
Entropy (8bit):	7.774360922801194
Encrypted:	false
SSDEEP:	24:HutE+rRT6KnplqeSIWzJzPTGCSZa5kBWTmGF6GM:HIz+olrWtzbG1k5kBz
MD5:	D386DBBF6AA5AF179182EBADC017B14B
SHA1:	62A5FB9A632B68BFC7324A546AF5A4030452D76E
SHA-256:	AB44D964F9079E1FF01E3CE5FF2886352956B8B65802700C2E204EB8CF5710C7
SHA-512:	C19AF5280A7AF97E517A1553E8BF9432FAE2DF7A57005BE4597260533DD67011B3ABD1ED868441E331C11BF24DF6BCCC88837AEF96A4B824FB1070A64F7B939C
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/uploads/2023/05/cropped-pngwing.com_-32x32.png
Preview:	.PNG........IHDR... ... .....szz....SIDATX..Oh.E....\|..I\7mb...Z.........Q...i.TA......POB..../...b.AiUTH..R....j.m7&.........CVIK#I.9..s..w.yf.g...zH+....u@.0....K.aZ....>.m..Z. "..n.I._.5@...WU-`..7.m."6.7..e`-....7...3.G....g.=.......`....h&.".7h...'wY......M........Y.M.. .gq.....,.@.o.....m.....q..Jxy...&...8.9.+4f"bo........0..n.>.M.Zr.z..y....~...'....hz.j....8.. c?+..3..{......=..9.-.@8.u..{@..n$kL.A..D5 ...D.Hl... .?!WJ.4...Sg[.Cc../>NP\|EQ.m.k.'.q.q.[pR...B..g#v...X....i.@8.l......;p;.......i...p@.Ril...Q..2.......J..d.S..h......-]....QSx...MM...N$..p.l..4..k...k..%$.%Tk.>J....#j...6...(4.......!....`..>..W`H....+.D...T.Q.....Gg......A}.!..V......u.A.. ..@..8......L..%...W..n..46)"....M&P...Po..W.jR..I`.x...).@..2..pEU.5..a.n...N.4..XT#.G.:......B...c..\|..ZK.0.X....yCf.W4)cu.k.X;..X.B..j..H1...Ap.K~.ox.....h.L.....I..c..&M...j ..!>....._....G....KjR..M........!.qN....0.\|......6$......cx.WP[B....1.R.ISV+......Q~W....fF......b..."...-

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 160x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6110
Entropy (8bit):	7.970028432977395
Encrypted:	false
SSDEEP:	96:jRwBCW8+N1oBSeBI0fIpfS9zmylwtEToxc48RgRiCS/KfbWVm1BRmFN3F3DohvQf:jRw0F+N1Rem0f+fKyylwtdL8fCS/sbQV
MD5:	DCE83C4D35A603C550E84DA1561DA41D
SHA1:	7E00B38A44A5093BB3BA418B8A3EA227228AFB99
SHA-256:	62AFDB562EE05DCB837C37027CFEE5C75FD0964332FFD0E97EB44B2EA5093102
SHA-512:	91F54334D704C0C4D883D4229CEA60C259A3FB1D28C65F5FB0680D94720CC6ED6B616526497699FA42D6C7105D64503C15A5196279EB4D0BD939223774FBB4BE
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/7706666/pic44be1aa631a26a8b6771e5d77dd0410a/big
Preview:	RIFF....WEBPVP8 .....u.......>Q".D........Y......X.w..<.....z+.`...o].....v.}../o..<..../.{.w/.....>..'.v.S3.@...........W..a^....F....^.n........%5...7..}...~.n.N.....'..I...y..t..M.[.........%_.....P......[d-/..5..xp...#/....[.0...[.....Q.f'.7....g.l.I6..n.c.......}.9.... 2.Gje.w.........b-~H9..yy.3(6.G..A.>v.'=..A.......s.H.7...\...m.........wSx..H...O...8v2..]s..~\.7..i<g.lj.q.XFefs..+...B..j.s..8....k.X.....9..hc.d.oc......P..>.X)t. .`4[...x....\|/(.. ..R~.9=../...._....<..g#v.....p.H.@...t.....3....wMV.=.M..6.o.....%~..v3W^.(..p\|..].....j..$.f..V..u..H....?,\|J..Y.b4.y....f......It!cb.....{J.\...]Q..T...Q....V....l......l..U.....B..#.6u4.Ql....Y5...Hj.............._..Y..?.h.&....pEG..C.G..6I./N.......C..P).J9Q......i...Pi.E...!(..$]$...>..e.\.T C.k(....P.gD!.W.E..b].8..Q....(.....h(W./G.4......~.Z..y..y........K...].. .G}...........=....y"..6.....f\.%.W.x.."{..Cu-....p?".......}.IT.L....]i.].......a........\B.D..#Y@Jz6./\|.3

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1464
Entropy (8bit):	7.818589258484129
Encrypted:	false
SSDEEP:	24:U9GvnZ3Hy7JQ2Ot2Y1bT4rnrPZsmjhILu7eysOJslYZykHCODV5R17M9:6GR3HqQztArnVh1KToJPDRe9
MD5:	57F203856A36638EEA57C5D4AD018098
SHA1:	CA14C5777F7EDF5A87B180EB9598141E91EA263D
SHA-256:	3D27E97E56335C5E0134359FAA896F1E69C3F18E570F46EAD147BDC7098A0B2D
SHA-512:	B319EF2CEB900BE702E8CE6A486A21DAC87C9F411132B5B6A92426C3CD7E7B83650A043E4FC3057EF0F3A9743D0F2757D963C91063B23274D3E80C63550288C5
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/mk-rns.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....#I....SU.\....m.m..x.m.wGWI...z......_..)v...g.9W.w>..1....-..d.(.....\|.X].&>..?A....P).}.+L....!.gf.IJ)]".lI....Q...K.S.v..X..86..7<X.....1x... p.`....m.......qL.B. ..i.t..wu!...$.KJ...l...M5R:....jW9Wy,^.......M......R.F...HmT.\|H..aL..s.K.k+....C......`?...@O.......Rv...M1.C..9JQ.j..f.63{.R:.b./q6`.p.T..=..).....-../o.gN...f.....R..L.;..>.>O..d..N.=.........P.An...4.2,>.....B?^q....fV.b>...fv.(.RFe#..X...z=.5.?dp_....?.X.m....v...>..z..h~...E...f.Z.{.....p..&..@y:gf..L...D...0P....h.. Y..0J..2..bz.~..D..,..u.x...f7....6B...k..1E._..(.o-..!....2K..?.?p:@`..L..tm...$.....'.v...F...x....E4u..k......a..f...%..O]..)......%4.:.....,..b%.......3>.^......Uf...H/....Y..3.x.....j.fZ.m.X.~......R....-....aL...'.Cz.\...0V.".f..K.3+....P......./.t4..r.x....f....G.K.+0.x...^.....(@.....U......)....Bn...{..Ea.W!....m..ZG=..\|.P.../.]..........."...4@..7!.h....jV..1.z..?..GH..;..E.K>....h...uV#.S..0.).....7v

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65492)
Category:	downloaded
Size (bytes):	352721
Entropy (8bit):	5.593323815652209
Encrypted:	false
SSDEEP:	6144:cx4E+wJxEi7l4POrDogR4CW+uFmB7zMYHK0D:ufJxEi7l4PO3hR3W+amB7zMYHK0D
MD5:	ACA5A794080F1FB49F9DE0D27939C0E6
SHA1:	69BC68FA840682DA81D20B67F3307E3383D6F6D5
SHA-256:	87F10DC8ACDF22906504F040A091BB698F7B430CF39AA74DFA7AED5DBABE491E
SHA-512:	A359508BCA9A6CA5505E9AA39781AD052903D14C101AEFE62D3FAFFEB1ADCF199B4A3DC5A95B178FB8F0B91111B995A44DE60643F8AA1D2F468922C04D8DB020
Malicious:	false
Reputation:	low
URL:	https://yandex.ru/ads/system/context.js
Preview:	/! v:937691 b:default c:loaders/context /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o++

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 200x188, components 3
Category:	dropped
Size (bytes):	7770
Entropy (8bit):	7.9035069547529835
Encrypted:	false
SSDEEP:	192:ffgbsqrXe7DLmQDP0ACKaNab6jNqfRq5L2JH:fIwqr4LmQD0AwuyIJ
MD5:	0EECD3F26A82EE3626D39CE1E4877E4A
SHA1:	4ABE6526EB31F1EB82E4E85D535F1BADE4C25D29
SHA-256:	29A53D5CFEE2857F6D550EECBCCB55A11C3193689FC2C0FCBE0F85C6A5A35432
SHA-512:	D2326B4046C8DBD2BE2D31DB9A39F6DDD16A02DFE91E2D0A3A8CF17CF9F85998A929050D15EEEE7BE870F51E2BD2F9F1A296F8433101E5717033A0438F43C931
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"..............................................................................................................!..D...Ybb.u....Z......N..^76...Iq...".9V..RZ.ef.....^...$-..oc.......).z.....?..s<Gg..D.>......K...K{6.c.Xs..U..R4.cR.n.[..[^.w..<,....Ka..._.mG...O.]?.Td.]..r.Z...S7s...$j[.6bZ/..%.&..n.Z.GWkWY.....7.."GW=oj......9O.u.....g@.J.w...l........5..5b.z...o..V..~gn..Qg..;-G...K...N;Y....-R..z.%x.]#...i`..o...,..).o...is.u_.nK....w..z.;..].Gk;...z.U.5r..R.X.a.}.}3.Y...%....z.......M.....9..z....-.....yk.=.jh.l}.2.y.:..9U.5].K..Y..... .l..P........4........................5......236!$4"1. %0#&@ABPp....................j..+vL...mQw..ej..Y..4.VWl..}..V...vV$^>..R.....P".&.?L%(8.....Q#j.!...}!....A..c..!.m...R..........`......l........[E.\|....t^.6.......;{....[}..(0..c

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yandexcom&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23432)
Category:	downloaded
Size (bytes):	23433
Entropy (8bit):	4.988691933097723
Encrypted:	false
SSDEEP:	384:uifv9o67LRIHsTZQu07f087x7iY3bVyYQPDcdd8HyxlYOgjYYuXCy90fY6wEvyMa:pv9o2LRysTZQugf087x7iY3JyhPgdV/n
MD5:	63FAD256B41B5D84BC1E86461A96A318
SHA1:	20D44C76509B9FB61A6E005112D60A1F3B73B8EC
SHA-256:	A69C12CCD186A899DB79FCE802B46C08E71F69C2C422BE2666ED8565E3ADD026
SHA-512:	09BBD78798D0A62B0020A3C97A2E1E34970806003BFBE8F6DDBBDAA248C10A4E947BF58D93F1FB468A7F820D1BA6F83E85A561E740277555F8AEBA356A6D6C72
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
Preview:	"use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics(d,b)};function __extends(d,b){if("function"!=typeof b&&null!==b)throw new TypeError("Class extends value "+String(b)+" is not a constructor or null");function __(){this.constructor=d}extendStatics(d,b),d.prototype=null===b?Object.create(b):(__.prototype=b.prototype,new __)}var __assign=function(){return __assign=Object.assign\|\|function(t){for(var s,i=1,n=arguments.length;i<n;i++)for(var p in s=arguments[i])Object.prototype.hasOwnProperty.call(s,p)&&(t[p]=s[p]);return t},__assign.apply(this,arguments)},reactive=function(getter,interval){void 0===interval&&(interval=300);var subs=[],v=getter(),interval_id=setInterval((function(){if(0===subs.length)return;var new_v=getter();if(v===new_v\|\|"object"==typeof v&&JSON.stringify(v)===JSON.stringify(n

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (23297)
Category:	downloaded
Size (bytes):	24108
Entropy (8bit):	5.179652042054449
Encrypted:	false
SSDEEP:	384:nIQ6Luice1+uVx7RBKvsQcCWFFH+zEME35KYF+ipVVMvZ9pq9n:36LuiZ+Kx7HKvKB+Ql5UiDVWDEn
MD5:	68DDD6A1DF957888C4F3709393C1A7D5
SHA1:	8400DEF22D72366CF8749423D4C9D846176DB821
SHA-256:	9C911AB93CF6099AEEDDB19CB1903D0EF838329443C3A0549C754DA47F90A70A
SHA-512:	20EE59250015C94F162A890C639D16AEC06608B1DB5A934694C5E859A05EF70CE0596E055F2B870A7FCFBF1A42C2A3DA2F6F8377CE5425FA8190B6A720187BE9
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html
Preview:	<!doctype html>.<html>.<head>. <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>. <meta http-equiv="Cache-Control" content="public"/>. <meta http-equiv="Expires" content="Mon, 16 Nov 2020 00:00:01 GMT"/>. <meta http-equiv="imagetoolbar" content="no"/>. <meta http-equiv="imagetoolbar" content="false"/>. <meta charset="utf-8"/>. <meta name="ROBOTS" content="NOINDEX"/>. <meta name="ROBOTS" content="NOFOLLOW"/>. <meta name="ROBOTS" content="NOARCHIVE"/>. <meta name="ROBOTS" content="NOSNIPPET"/>. <meta name="ROBOTS" content="NOODP "/>. <title></title>. <style type="text/css">. body {. margin: 0;. padding: 0;. background-color: transparent;. }. </style>.</head>.<body>.<script>. !function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineP

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11887), with no line terminators
Category:	downloaded
Size (bytes):	11887
Entropy (8bit):	5.174151934202555
Encrypted:	false
SSDEEP:	192:r8IQjyHtuLIZyN5zzDwjLcvBr8AZuQDMKm6wbeM5mLEN:rTQjyNukZyrK6ZO6Ap
MD5:	12B50639D930AC167EC95CA554915677
SHA1:	CF903E754A239467C67CE05A84EA7EC50D4D52A7
SHA-256:	10EFA10637C7D5118A6140BF92BFC790EDD4A9EAE884EEB4FF0530E04154D8AF
SHA-512:	4B693E39D01665F019FF3A1CD5E8717FA43318D63A13C352782E3F9C5B62C1420F6B89BCEA27D6557AC6847483C17A1F9C48B2B635A043BA9A8ABBBD7FF76C6B
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js
Preview:	!function r(i,n,l){function a(t,e){if(!n[t]){if(!i[t]){var o="function"==typeof require&&require;if(!e&&o)return o(t,!0);if(s)return s(t,!0);throw(o=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",o}o=n[t]={exports:{}},i[t][0].call(o.exports,function(e){return a(i[t][1][e]\|\|e)},o,o.exports,r,i,n,l)}return n[t].exports}for(var s="function"==typeof require&&require,e=0;e<l.length;e++)a(l[e]);return a}({1:[function(e,t,o){"use strict";var r=e("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(o,"__esModule",{value:!0}),o.fadeOutNav=o.fadeInNav=o.isSelectorValid=o.isElement=o.getSiblings=o.visible=o.offset=o.fadeToggle=o.fadeOut=o.fadeIn=o.slideToggle=o.slideUp=o.slideDown=o.wrap=void 0;var i=r(e("@babel/runtime/helpers/typeof"));o.wrap=function(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:document.createElement("div");return e.nextSibling?e.parentNode.insertBefore(t,e.nextSibling):e.parentNode.appendChild(t),t.appendChild(e)};function

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1186
Entropy (8bit):	7.475005998066067
Encrypted:	false
SSDEEP:	24:+0o0XxDuLHeOWXG4OZ7DAJuLHenX39Afm7PqaNm9225p4nbgQIAi:+FuERAse149JAi
MD5:	BF162286F8DC2ECCEE06D054B8004AC7
SHA1:	FA2E83B0FC0E864316508227DA960DCFDE0EBF09
SHA-256:	5A57A0AE05397D51833DFF2C24CEF9D89E654E2864CD665B31DACA3394F91B46
SHA-512:	EA4B66399CE8372C56104C0254452DF6FAE8A7CC62C0329D4C64F654168C9252E403E7B6575DFC34759420C821ABB48A625FC23C9E24FAD9858BCE6D3C8388FB
Malicious:	false
Reputation:	low
URL:	https://avatars.akamai.steamstatic.com/fa2e83b0fc0e864316508227da960dcfde0ebf09.jpg
Preview:	......JFIF.....H.H.....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....k...W.gr.dl....v...[....".o>........a. d......;.^.+..&.,...~....u..\|..x.E.4..M...M..hZ....:..l..Y..'.......)..#IM..i....w..y.jxiN....K.{.#....;....+..,5..u..b.627..A.....kK.g.W.d`...2.{..+...._..;N.....w....G.....R. ......>.!hz...Y!......I...2L....I..e.......~qC8P..>....{Y.Mw...vm.U.b.*....U/;Z.......H......6.^....El.....G........8..J.....j....6.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	5589
Entropy (8bit):	7.86036566157457
Encrypted:	false
SSDEEP:	96:C0hFyNgmZU9Qnl5gcbh1KiMEvfZAFhRJXEizOk9VuQqJGasOYwu2lgo6G8VhQKxI:70guIQnfgcbh1KjEnZTC48ZwuKB8PQYI
MD5:	78C101EE09B485F9586E1666EFC4D563
SHA1:	064C03EF368E8F235B313858BFD2DF352B1D34A6
SHA-256:	8B0BA5AB49EF87A9A2316EB32D637C90CF9FF8C75980DFC7ED26E68B2E0F0462
SHA-512:	5DD6D81FDC3747D0795C008CE10D29B2D21A560709B8058FDA43AD82DC829862D9343370561CC710F79ED3616AD2FE654B726187B8B5DC431EFCF71D635B6460
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................G..........................!1.AQ."aq...2B...#$3R...CSUb....%67Tst.....................................7.........................!1AQq.."a..2.....3.#R..$B...............?...Nf.q.rW_{D.......T..Il.X....JW2H..{..<....-...;i...\|.....6.L.\.n.....z.8`.....y....88o].B..I.3'.D.......~v.3..f.B..=.i.aq.._vx9.G_N_u.`.9D'g}WKDE...........d.E.8.!..I[Q.l<......Q...;...7.:.w....Y.*..".C........c..W....H\9....(N!k..h.x..k...\|...Q.MV............-..%i..p..,.k..2A..:...JY.yzM.q.9.4..q.BEN.F=...-.C/...T.o...6...{..H.n..b....6&.9.\|...W.e.....=...2....u>...M.%.M1.^[..U........+....R.=.bt.S0.WIR..T."..u.........DDV...D .M.v+}.)s..Th.s..V.oJ....;a....%..;../.l.s..2v<C..@......$...EGg.y.I..1....OV....tc.7.#...s......R..Zg..0.!..\.2...........`.'p.2....6.0.......69.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ssp.adriver.ru/cgi-bin/sync.cgi?ssp_id=19
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 169x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4958
Entropy (8bit):	7.952099937965807
Encrypted:	false
SSDEEP:	96:14cOdPR1mS/ndSBTwA96FPGCvry9tGIZLJAwtXO0ioicV+0uUfKWcmiw/m9EcIx6:1zOP1hnewA96F2JtXVio5+STchw/pm
MD5:	DE7365630641529FD8ED9AC4EB18B7E6
SHA1:	F67D6F87002CC367AC612CCD1879389E26850569
SHA-256:	0DA3EA4B2B47D2E6A3A170187163F8BCC0C9E62F7DACB98D64ADEC90D2940B39
SHA-512:	9149F0B634D3F762863F076AEFF754FAC571A0854DD48DE0640234F821CB69F2CC6BD2EFB6450EF28945C95A9BE281D7C9F9F4B8BFCCCFDF4817E60B77946CC7
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/6888053/2a0000018442f6c30046ecd4e432f1af70b7/big
Preview:	RIFFV...WEBPVP8 J....S.......>Q&.E...=v....Y[.J.8.x2\.......0....%c...._.'.?...=8.<.....}......O.op..XOT...._...z..........?.O0.....\|-....U............h...?.z.{S...]..q.......J....z..{.G.W......~.>F.=.#.._..a>....T.c.................O..............O.U(.vR[.....T.m..)1...........n.@.)...Z......[..4.'D.".R...R.=...P....h....-.:.W..>P0..V....d3.F[Q.b...p......*.m....d7.ed~.-.7.h=..EtJ...G...@AX...B..M.K7..y..~...L....r.F{.Q.6L.I.?...q ......H.....Y.."B..X..V.M?......M/..y..._.[.p.&.s.R..U..&U..k.l....c...4......O...k..42........W\|y.7.._..R..........).q...e..<.<.L.4..e..I2.".-.[7....(.s<!.0..>...\|.W2...F..I.>...u.>Ep..tp..v.7..M.'t.N.n.....V6#.k...P...N.-U.u......"...l=.d[...e..E>.C..5.(..k.WlC...k..E3....;n.U...F:#A.~..V.d"P\|....&....5J......Y.X.....`u.-.,.Cfh..7&...#\Te.._..U_.V......;z.$.?..v........y_4..]r2x.@&..7_...).D.....T...83-^...6BPKJ^..B.V.Y!g`.U]C...!.6l.!.....'y.M`Q.1...e,.....?....!y..#.O.p.....k..j,~...N.E.!..pa....%...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x188, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4042
Entropy (8bit):	7.952820717062689
Encrypted:	false
SSDEEP:	96:rqiTo7pD58lcRSnjyRb+uVVqGTE+ZPo3okS4l:rtuAcgj0bRVE+ZPoq4l
MD5:	3C0CE9E4D523D3F9DA6EF8035FAAD4D7
SHA1:	E0C50710039BCB50331E887D9E2139A3DF4082AE
SHA-256:	FBDB0FD801B08A004EE28187628505EB8D6BF6BB46834FDC4BD44956A4490D5E
SHA-512:	1C2BC26BA7043549CD821AC9C4451EF7503D08B8B5CDE34220C8A8FC71B4B181CDBE4591F3FCC8C69ABDF6C8A2B38C133F93CA295EFCDBE5A286A18534821FF9
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/9357242/piccc8b15d1bfcf5a264269aa8a33f81317/big
Preview:	RIFF....WEBPVP8 ....PK.......>Q$.D.........Y.$O.sP....}.......`.s7.....~...n..d...]...7....Y~....O..R...?.._j)...............z.{7......i......@8Y>..C.+...W.?.................w....k!l..;...jy...h;S.=..A.i.k..CQ.....c..h;S.=.v...."yJ<.T.Y..D..-....O/..{.[..&./.%..0~W.E...:..3.p..m.....~..V...5..8.<lu.....s.".G...bi!;.eH..\|8..m5...f.k.m.....2.a./..z.7...eN.\...s....}B......lP<?......Y.g..G...UM......i....&..9...!._.....S......XFZ.."W.....x..<....b..!n....ZlVs."..K/W.e.Py.p......r... .....`m.M....4^.2.tc...>.]..y...y=S...a....c9...\|...G.........6-....r~./_.k....it.:}..SK@.go8.I=...N9C...........(L......f........CH2...._I...K......W...7/4.XU...T..,.8....&?.........Vi./..............Ee..+.h^P...+.A..I.T.G.2....70.4.YQ.r.....x.>....."..}.....e.dq......o..ESX....)b3....6@.J)x..6h!V...E.....D.8.Gy..D.....=XY..h+.....U/.\|I.....Ds..-8...al...bQ.......M.\[`.E.X...M.m....UF[.Q>.....8.".I.6.i6.>_f.4.$.k.B8...Z(Z..5. .4..S.6.5Fx.......7z.!.'D.m.^.A..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26004, version 1.0
Category:	downloaded
Size (bytes):	26004
Entropy (8bit):	7.993186940356352
Encrypted:	true
SSDEEP:	768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs
MD5:	7F0CDAF91230F9789CA4162AEDFF612E
SHA1:	965DE571AA794DAB64076C3CC64DC8894B843F23
SHA-256:	033696B7F1AC04D1DCC102BE84550E146236CEFFC25A6CABC12AA51A6EE410B9
SHA-512:	444460846FA2BFDDD7990C792C6FD8389C564B5C967B5CC10FB3717117C5424FA33F23F8C4CFFEFAD176016A79BE5557920908CC82F7942700A0FAC71EEFDE36
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
Preview:	wOF2......e........L..e .............................z...?HVAR.7?MVAR3.`?STAT...(/<.....,..g....0....6.$..0. ..Y. .....%.&3.Ye.Bo...(a..6.!l...A....:6d4.....L..h..".e..i..&.,...5.WW..v.N..v....U...6I.>]N...'i[....{.e.IG......~f].>.c....{...rh...u"..M!..r.@..O.sC.U&.=...y..=..PUU5..%].%...p...CN...?..>.!..6.R..A..0..!~........l..H..R....E.YX....&.bu.....5.D. ...X..(]`)m)m.....bL4.Y./.t..z.z..Z.\r...._./..~?..9.G...vd.)@.`.B......c...u....?mOz.O...a.....zN.....'.B..=/.B...d.6.~.dC..t..t.;.2...%...../..j....r.....pu~jk..o:...J.d.l05...J...@2.....}/L...8..l.x....,[2...(.GP]..#(..@6.j..<l@....9...4.l.,K.l%n....<.:....z.+.w.mR.@.n..s.~...b..k.......r.s.@.*k.m.+R....i...Sn.......%.OZ...eR\,]..&.Q..i.(@.....v&......8$\>.t.......B.(`W.~C......S.o..).A.b<.ag.....R.^.jOm..L_.....@X$T....Sv.b9.d'...R.......c).9Q~S.._.i ....H.....ZW...b3..,.jv.,...Ot....{)..4........1..Q............B..UH-.!...2....I0.#.i..)Y.5F.a.Fk....s..i.7..;....v....3Bb..Ox"....O?y..SI#..

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1034
Entropy (8bit):	7.766616632365276
Encrypted:	false
SSDEEP:	24:3/yxhEz+MeT5Mv9Elbo/hXimICMZ1fjVLZgXuDjcCy:Pyxho+MU5MFV5imyHjBIuDYF
MD5:	1A055BFA3FBB0812DF2C67D617A14AB2
SHA1:	44B829109D8158D1B1BB901C41FE1114049E686C
SHA-256:	DBB14CE8C5346B7513874EB7FA66F24192B0C3A498E35081464409887B7A49A7
SHA-512:	B5E368CB2DC88F38C211C808EE966197455E9BC8B0889B55521995EEA49E86E51AD4CC7B292196553DB5E14D4C7382B929DFE2B35DE216F9097B70EB38286301
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/tongbao.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx...C.#....$=.t.=.m{V...}l.m..f3.:........S....[e....2..d.Z.1.v./e........l.........%.v......E...q...tg..."..\|....;N.+...y..R.... .2...W+.J....@........l...U.^s^....."..I.C...Q N..7\Ao...Z..w.E........p.#..q>+....I.F..1...p.....Q\.....4.yB".2.W..AT...&.+.g!..0.5..-..$1/1.Wi.3...'...?....QS..7....._....D....U\K.M<.tR.F#b.Q\.....;aA..g..6..+Y....6..W...w.....{..TKy.p*....6..JLg2>.@....2.........BCa.6........%..<].......$.....M.1..Q.`.k.m Lt.Zb..T3....s.<K.....0[..(..r.%.....@.1,....1..0.D..VrxR.rm....3Q..>....I^h....I.@..sE..,TC...L.Iv;.(.......p../...R...?.^..@.L.w.[CY....~\|.:.'W.(.....V[).3.](O..+.H...3...........E.w..\N.....9.....q.s8.r.3.......R..XE...D_.3.......X..z.g-...;....a/.....8./s.C...9..T...._.'Y.7.y...).2..'dY.J.T.....?$.fI.9........ci'G......s.78.q)....,....#i~I.....HK......s...b..Y.-4&u....kHq.5\C3UL..p.:....?.T.b..`_.......u..W..f.?.1.B.W.;../.~;..?f1cv..H..GI.br'

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 133x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3562
Entropy (8bit):	7.947506098447904
Encrypted:	false
SSDEEP:	96:bNPqkdWCAPmkxkgja5H33PYpnxR9+nmWAA:bdqYWfla13/YbDA
MD5:	D66C4AB5BD0DD1EC958DCE0DA7A0B45A
SHA1:	2A22E1E2EC2527ADEB7072E1AB3A8B818E4290B8
SHA-256:	13B12D86C9C1C35009A12A6238170F4285B6D91CE25232064316AE79E96096B8
SHA-512:	F767B620D425F4B9B33927AE4F8627E9CA78380D000016FB2504C38CDF4866E8F5E69128D078A1561B91CC9CD9EEA7D5DEF930EBBA73E8508EE0ADC17AF50F6D
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/405900/pic09bd08e399f3a9b70a18adebb38f6c9b/big
Preview:	RIFF....WEBPVP8 ....p9.......>Q&.E....Ff...ZA...j.....C..A..q..?.y.....-Y...P,............y.^..g....._.~d.j.0..............I.g..............s...;.../....._..F.;...X.#...B=..=.......t.X(H....3..".....E.n.~.....qF....=P\.JO...+(.B...`.......$".X.]..ze.J.3>>..7......!....h..+).,.qy-U...=..&...N...=.....z.7........?.r..a.5...O;.aSx;......C...(.......Unq..r.C'.......Q.....`..k.5.....9}.....N#LN/.h...\|...8.l7O..Mo.0...i-j.W..n.,..}...pO.[1G.@..P...x........Lg.^p.Z.>......@>I...L...p.....1.,5C.;MD...W..<t.\|.nP.S........O... ..2...,..}....,...\..RC\|.#.(.m.6K...P....,4M.XDTJ....P.!.$..E.tqrQ....k........$....\Rh..Q,...r\|.D.4..K_.....m.,)s..yR..h..J..r..R..?...(.a..V@.,.~..~..f.:w..%..g.H...K:..Y.V.]..i/$p...9...\`..=.Ia....k}....@....#.7.Cnk..7....d.3..\|...B..A..`._....)..7.\|.....T.)..'rodf..........P...[j_?.+_o...?.;.....T0P...tn.!4&>A...x...)......d.JNm.....O........j..3..;.......j....=.N.....gP..d.)_,...Uv.y..j.....c..Ag...<....#..I.i.K...vA.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57084)
Category:	downloaded
Size (bytes):	110035
Entropy (8bit):	4.919722681423811
Encrypted:	false
SSDEEP:	1536:iLeJ2f9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzE
MD5:	99AB466E0866C823AE5DB517D59CEBD1
SHA1:	5595A586CBD42B31377681B9D35293278D75D336
SHA-256:	698B89C0DA3D319754D6A837B5E6D4E6A42DC402D9FFD7559B8C4CB29C644340
SHA-512:	D19932F64ADBDB1286B61D472526FE0BE92E5FCDBECF9DF9C9DC607D46E26F8912C74294256F1A6B56D0FB14A774679407187EED011F4B5B7008981AA52F6DF6
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14270)
Category:	downloaded
Size (bytes):	14302
Entropy (8bit):	5.373102030601524
Encrypted:	false
SSDEEP:	384:nwiFCaIuOdJ7DLh+2jYTSaIX8qycPnhcZkdIj+7:wDlPK4
MD5:	DCFA01563164E699212FCC8E2A8272D1
SHA1:	CFC07D93120DE0F0B91E74C709F06AEF873B7F35
SHA-256:	1D490F8BA764274BFD0C05C9F08A47FAD09E3ACDC610277AE758B2110C2FC487
SHA-512:	BFA81F87F19E4E94A0C50CD88F2563E57333EABFA1B9DB18957039BEAA14FE08D9372A14E662593B81DDC244029B0D5BD209A600BB8EC380E07531BC15EB1970
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/937691/ae84bbbd1296b7622b03.js
Preview:	/! v:937691 b:default c:rum /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,i=0;if(arguments.length>=2)t=arguments[1];else{for(;i<r&&!(i in n);)i++;if(i>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[i++]}for(;i<r;i++)i in n&&(t=

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/sync_cookie_image_decide?token=10234.aUB3SqFXQihpV7u28KLmxTeuijO6AILiIGSmXB45GAmCA-XNN_aZ3BsS_WV9BFXEXcMi7wmyeblU8qtwS-FZj0MkgvXA4Qk_5OI8GDbVDq4cjs3HtAI8NG8YU0jZpZKsmuUtntd01uER4IpUIIbN4fUDZtK8LWl3RrBdwj7a9iOC8vJbKIpipFfqyZeRXA9Wr6kZKhssIdUzDHA-lArJPQTqlEdEzRmVWQ_JY3zD2Bg%2C.uciNXaA1uFCPKE6sbyPqFUdf9oo%2C
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19719), with no line terminators
Category:	downloaded
Size (bytes):	19719
Entropy (8bit):	5.168306691075826
Encrypted:	false
SSDEEP:	384:XSmyITkZy+KMzEF6CCIbYrAcIy3UFxVjxRnRx8:X0O1MzqCIbtcb38/8
MD5:	39C95A10F0A6498DDF094B00FCEAAB43
SHA1:	3A6034A6441BAD661C50627F5C7B3136EF3DDC48
SHA-256:	68918493FAB5F333343716EAE17CC90F989906C3021984E9AD5E95E36AEF4A63
SHA-512:	91A56C1BD397B58B782968AE76DB62CD21A3FF2BEAC13DEEBBFACD47F20D3F49533321EFA24AD0ED881973C5D84616028232215D629150D30EF04A2770F2AEA0
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/theme.min.js
Preview:	!function a(n,i,r){function o(t,e){if(!i[t]){if(!n[t]){var l="function"==typeof require&&require;if(!e&&l)return l(t,!0);if(s)return s(t,!0);throw(l=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",l}l=i[t]={exports:{}},n[t][0].call(l.exports,function(e){return o(n[t][1][e]\|\|e)},l,l.exports,a,n,i,r)}return i[t].exports}for(var s="function"==typeof require&&require,e=0;e<r.length;e++)o(r[e]);return o}({1:[function(e,t,l){"use strict";Object.defineProperty(l,"__esModule",{value:!0}),l.options=void 0;var a=oceanwpLocalize;l.options=a},{}],2:[function(e,t,l){"use strict";var a=e("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(l,"__esModule",{value:!0}),l.fadeOutNav=l.fadeInNav=l.isSelectorValid=l.isElement=l.getSiblings=l.visible=l.offset=l.fadeToggle=l.fadeOut=l.fadeIn=l.slideToggle=l.slideUp=l.slideDown=l.wrap=void 0;var n=a(e("@babel/runtime/helpers/typeof"));l.wrap=function(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:document.cr

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2144
Entropy (8bit):	7.897298655971352
Encrypted:	false
SSDEEP:	48:leQLXsWQXkysUSK9bCyMhoUdKKPU2yUTc7o33sYCLAz+aZd8AW:ZX3Q0NvdhdJc8c7oHszA3d8AW
MD5:	94886DA69F9AE35ADAE36761C4FC6C10
SHA1:	FB464D56294F02840EA7B0966B2E40BCDA52E09F
SHA-256:	951645B999D6E96540832B3A5BAD8A22A1E3FE4FCC6594B91D061FD0CACBA7A0
SHA-512:	F47A785C63E61D977BFB68687F596778A650E046AA1BBF7C6346D3B6CEE125008EB764042B7E0E85C5763A3EA0EA8F0B93487AA2DC337005DCD29CC9116898B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....'IDATx...s\|......'.vm.6....w....mTwm.w.jGA.s....G.>...j....xt..w.?.....c..i.A...=-H8Z6.$...U.x.)s..8..6...[......<...........$..J~...d0.u...v}.........}.....yw....rjg...i{..v..h...M~9L...W_...........{.F.\|./0.>d.<P.N4..9.J;.B..<:}..X..N{t)L.......<^.:["..L.b.>...}..Nx..m..c._...u.H.9.L}..K..:..].`.L...Y....-..y@1....>A..u.\|..As=d........4.{Z..ipp.E.:U.S.w..Jy.o..i...M.E......;.s.....G..sG.V..G.1... ....c...c..q..I...=r!d.9....P\|.Q....X$.d<...."B...."'.........6.9...:J..6.N..".i...@..K.........`..Cs.?....=..\|Q....V....._F..R..Gw3.m.nt7.......6\3.v.+...c.....6n.9.....].6#i...ICX...n^...>z..G....n."..b..4.......0....X{..o~..........`.H,N\..Qz?aV....}K..^...:.L...7O...i.P..\|...........];@9T.a..E=.W>..lq...K..N...N.4d.Y1z..4..x4.I.z(nT..M_..v7".P-...7w.@M.}.!k.R.j@.u.a..Suu..[.z.=;J. lJ.i..>.....z.F..@......7..{.0jT...Y].....6~....HZ....4...".@...<.+W...d.z4.v.S.C.......\..f....L...W...$..FRN.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2144
Entropy (8bit):	7.897298655971352
Encrypted:	false
SSDEEP:	48:leQLXsWQXkysUSK9bCyMhoUdKKPU2yUTc7o33sYCLAz+aZd8AW:ZX3Q0NvdhdJc8c7oHszA3d8AW
MD5:	94886DA69F9AE35ADAE36761C4FC6C10
SHA1:	FB464D56294F02840EA7B0966B2E40BCDA52E09F
SHA-256:	951645B999D6E96540832B3A5BAD8A22A1E3FE4FCC6594B91D061FD0CACBA7A0
SHA-512:	F47A785C63E61D977BFB68687F596778A650E046AA1BBF7C6346D3B6CEE125008EB764042B7E0E85C5763A3EA0EA8F0B93487AA2DC337005DCD29CC9116898B4
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/deart-13.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz....'IDATx...s\|......'.vm.6....w....mTwm.w.jGA.s....G.>...j....xt..w.?.....c..i.A...=-H8Z6.$...U.x.)s..8..6...[......<...........$..J~...d0.u...v}.........}.....yw....rjg...i{..v..h...M~9L...W_...........{.F.\|./0.>d.<P.N4..9.J;.B..<:}..X..N{t)L.......<^.:["..L.b.>...}..Nx..m..c._...u.H.9.L}..K..:..].`.L...Y....-..y@1....>A..u.\|..As=d........4.{Z..ipp.E.:U.S.w..Jy.o..i...M.E......;.s.....G..sG.V..G.1... ....c...c..q..I...=r!d.9....P\|.Q....X$.d<...."B...."'.........6.9...:J..6.N..".i...@..K.........`..Cs.?....=..\|Q....V....._F..R..Gw3.m.nt7.......6\3.v.+...c.....6n.9.....].6#i...ICX...n^...>z..G....n."..b..4.......0....X{..o~..........`.H,N\..Qz?aV....}K..^...:.L...7O...i.P..\|...........];@9T.a..E=.W>..lq...K..N...N.4d.Y1z..4..x4.I.z(nT..M_..v7".P-...7w.@M.}.!k.R.j@.u.a..Suu..[.z.=;J. lJ.i..>.....z.F..@......7..{.0jT...Y].....6~....HZ....4...".@...<.+W...d.z4.v.S.C.......\..f....L...W...$..FRN.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 200x191, components 3
Category:	dropped
Size (bytes):	6640
Entropy (8bit):	7.884897521691926
Encrypted:	false
SSDEEP:	192:HqDcHsdm24R649ls0y8edwMPQ3Aug0T1ucU:Hqc2qLbyFdwMkAugVcU
MD5:	A0E93A446120143F2D42C82CF025D5C9
SHA1:	8270412230EB9C8F97ABF0B8A902D99CD8B47225
SHA-256:	FD68F211D6873A80FA62CA8C704035ED2C0EC02BBFFF4EDF42DA2E5DC4D5FD00
SHA-512:	D74A80E8FD6FEB6D8F043135F38A7B98031B4BFFB9C07CE7840CBF01081C7FD586B257573B87D3311EABF81BFF4738071C4AE8DD492FDF5FAC707BA93D7100E1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"............................................................................................................B.I..L9.:.....R..t7>.S~.R6Z...zC........]....K....6t....4....=.......u...0..^.mq..Y.......0./>.../......s...q+......]b..s...g...l.nI....9q...........Iy...9....s..K..w;.\.\|e..J.Y.....m..e..p.k....:.uJ......~.Iy...Y.{.y3..y......z..]G/'.u.....~r..m...Z&++...Z.<...A........N....aL....gdr..J.M.\|q8vj.I.\j....>.P.Xk.....{.7.......^}y9\).9...f..k6s........}..u;.+.\mu..:.T..v.g..m......C......l.~...4...}.O..4/S.\Z..[.:.rk.L..+.Q.l..>;\..O...r..y.w.. .. ..s.......6q...}...?...-.........................234.1...!"$. #05@p...............V.\.......HHE.`.%.8..3"#..'Z.....RY.."....aAP.....#...51.c.\......U.A6vm..2A.z.Cn...ac.d^.7q!.i...1.1.T.ab.f..U...T(...'X..$DXE.rz.y9;\|.v..rJ..W.m.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11498
Entropy (8bit):	7.976029552201588
Encrypted:	false
SSDEEP:	192:Qp6ZVul9ipgOs9t91lgE0aQY55CAOUErN+Rfq6/3E603x1yauexPJMjc+sz6XVHQ:+6ZVulJOGyE0aQ8CJBQl/E6IxttxBl6q
MD5:	06D1243A8717B6183DF6E6411ED0C758
SHA1:	2911EAB04DB7BC5260416CA8BC12110B2E59B893
SHA-256:	786563C500179577A4D4F22EB499BFFBCE5C8048CC4886563113DC15BBC4F512
SHA-512:	6486B6B425151A5EA624F9A8E8323435DE3588D1ABBDF8308D233EDA30B5B2870EECC7675C75EED50EEE3D83E7E6AD3A6BE160DD3BF6807C40AC2F0A1784DD91
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/xn--80atu9c.xn--p1ai?size=120&stub=2
Preview:	.PNG........IHDR...x...x.....9d6...,.IDATx..[..$...xV......6.m.m...m..f.F..R.o.'..e.....U.B.._(.....o...r....{...B.p....8.....B"B.........K.BD...J...W.....v'...Hy.Z,...$.V.W.J)~.......m.....r.f29.VTK...q..f;.W......LY.D.D.....x.Q....s..6,f....q..4...j9X;1R9J.#W.V7..Tj......_.......0^....N.=<...$.D...#d..e........e...q,........BR-.N%..'.+.K...q...S.z`t'.}.s.,..t..F.k.\|@;..#"..T`(..-]a!....=v...TE....e.. .2.\.......[....J.......;......?...k.o.._Qk....~f.d..)?(c..J..].5..u.T..z.4..u....].EF..@g]..[.8\-.s...q........n.).-,.7Uz.s_.z.5.N..N......"8...WO....6k.2W...A...'s=.:.sez..DI.....nw.].Q.m.g.._............~..I...$/..l.$.D(.eD\|.%.,3......f.,......6..8k...^...B.f'G..::T..V+F.\|.....I...:..o.lv..w.~..Tr%..t..'d.+Z5@...b....}...5..V,=[...,.Mi..\..Jq.f.}.3?;..+.....v.......t.[.hu.W....,Rt...9........J....R...b.t.2NA.z.....l)..:k.a..;..ji...w..m59r......>.i7]..._....I.+....:r.R.8...d...{.X.8)H.N..d.2G.~......._....F....V..$..~.s

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1131x800, components 3
Category:	dropped
Size (bytes):	114836
Entropy (8bit):	7.986262400459725
Encrypted:	false
SSDEEP:	3072:Kw2HLVD40X3cg+MiaXuyDHB4kl8qp3Jn0CL0ZNNP:UrVKK+yt4lqv0b71
MD5:	F0781AF81C44455049CFFC46F152EE0A
SHA1:	DFAA199D77587424764F4DE9DD898D726D370E3E
SHA-256:	ECA64B972426984A752F1F43535BC75A3EA438F73DE56EAAF95E765565E54AB4
SHA-512:	B319C0A6D6D0F8DAE0FB42B25E3AB72D7E7879B81A717069D2075DA42887BDEE8688A6967C08ABCF05E4CF2460E2049123197BD64D36BF98285504B90A85A4D8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C....................................................................... .k..".........................................`.........................!1.A."Qaq......#2r....$34BRst.....%&56Cbcu...Sd...DT.....'EUe..7........................................................!.1.A.Q"2aq.#.3B..............?...{'..?R.......Zg.....%W.@6.r.LE..5V..l...W.d...^m...B.O...n.l..9U...r..\.b.....n..."......-.Q..R..j`..tk!-.4...4.l.R.1..H.x!-..K(M...]>S.U.T.+..WIMS.-eL.L<.=..;Uz....qs`\|.;..G..{...~%h..rw...Ue..8.............or.6...F..M.@}..].V<...<...u....M.a{.A.'B......-]....;.B...k.g..s..kr..,U..j.!........v...i...W.a.9.ji].....}...1.S........=.5.S......q...M.....'....1.."tn.....d....B.....K....[.h......R.n....YB.H...KYl.ZZpS..:.%.r{..@..gIC.N.....{.........Oqk.x...8* ...wiM .9.)\(..pP.....N.....P.... ...(=..@.md.=..A.H..&.@W.....R.$ ....At.{..H;...t.........H.\|.0{....:..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (586)
Category:	downloaded
Size (bytes):	160624
Entropy (8bit):	5.517248835785261
Encrypted:	false
SSDEEP:	1536:CNQVavsomwV+IF8JgumFHskhor++tqpXeoRywWTF4uIUI5PNmK05/sFVFQcfSSf3:Clz/V+7A8tQNA/sDFoOU4GoY4HpRpm4
MD5:	59ADF761C8237E516736443A387544E4
SHA1:	4BD54DCD59725E2FE360C40332078D98BEA27365
SHA-256:	5953EE75766C5404B0445A152BC89446BC6D525845707140AA60A15F1F281080
SHA-512:	E16082B63057D25AC5AD6C11AB7EB0C5785855504CDD12C796EA9EA196EB64B7FE5EC8BE084451CEFF0C5B467BCA4FB9693A929811A1F3A317C53F579850FE0B
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.ru/metrika/watch.js
Preview:	.(function(){try{(function(){function ne(a,b,c,d){var e=this;return y(window,"c.i",function(){function f(w){(w=oe(k,l,"",w)(k,l))&&(Y(w.then)?w.then(g):g(w));return w}function g(w){w&&(Y(w)?m.push(w):ja(w)&&B(function(A){var M=A[0];A=A[1];Y(A)&&("u"===M?m.push(A):h(A,M))},Da(w)))}function h(w,A,M){e[A]=Fk(k,l,M\|\|p,A,w)}var k=window;(!k\|\|isNaN(a)&&!a)&&pe();var l=Gk(a,qe,b,c,d),m=[],p=[kg,oe,lg];p.unshift(Hk);var q=E(Q,hb),u=J(l);l.id\|\|Va(kc("Invalid Metrika id: "+l.id,!0));var x=Jc.C("counters",{});if(x[u])return qb(k,.u,"Duplicate counter "+u+" initialization"),x[u];x[u]=e;Jc.D("counters",x);Jc.ta("counter",e);B(function(w){w(k,l)},od);B(f,pd);f(Ik);h(Jk(k,l,m),"destruct",[kg,lg]);Ub(k,C([k,q,f,1,"a.i"],Kk));B(f,R)})()}function Lk(a,b){if("*"===b)return!0;var c=P(a);return b===c.host+c.pathname}function Mk(a,b){var c=n(b,"target");c&&a(c)}function Nk(a,b,c){var d=n(c,"submitter");d\|\|(c=n(c,"target"))&&(d=qd(a,c));d&&b(d)}function Ok(a,b,c,d){var e=rd(a,d);e&&B(function(f){var g,h=nu

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	48095
Entropy (8bit):	5.585147261587934
Encrypted:	false
SSDEEP:	768:AZ3oZdapNquWWUbMiT6dbcwmRk9zYkTi0Y1hTWNmDrYXxhZtKIQfpjZ4gGtFBkv2:sQapouWWUbGxcwQk9zYkO0Y1hTWSrYXL
MD5:	70FD5D51CE6E6EAF1AFC9C244B5587A2
SHA1:	A567F466DD54560BFCCE359E7B622C0562E1EC54
SHA-256:	6958198484F2B45DF3E2FF829FC05D082C84C30BE1C8F88F26CED2347B39A888
SHA-512:	27AF8A20E0BF163AFDB643572F71731EFD6EEE41B9B2303CD6A642C834C1A6CB028697D35C87C9A314A5334814169B1EA983AAA0073AEC3F0FCBA0616B3B927E
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/o-sayte/
Preview:	<!DOCTYPE html>.<html class="html" lang="ru-RU" prefix="og: https://ogp.me/ns#">.<head>..<meta charset="UTF-8">..<link rel="profile" href="https://gmpg.org/xfn/11">...<meta name="viewport" content="width=device-width, initial-scale=1">. SEO .. Rank Math - https://rankmath.com/ -->.<title>. ..... - ...., ... .. ....... ...... .... .......</title>.<meta name="description" content=".... ............ .. .... ....... ................., .............. .. ....., ..... ............. ............... ........ . .. ........ ............. ."/>.<meta name="robots" content="index, follow, max-snippet:-1, max-video-preview:-1, max-image-preview:large"/>.<link rel="canonical" href="https://faq-kak.ru/o-sayte/" />.<meta property="og:locale" content="ru_RU" />.<meta property="og:type" content="article" />.<meta property="og:title

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (9462), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	58094
Entropy (8bit):	5.585130688998223
Encrypted:	false
SSDEEP:	1536:HapouWWhbG7cw7zYBSmDTHL7DSzabDDQLRDqaC6C7DgzOtDZ0yB7DLfxBDSA6bDl:6+uWWfrYXxZKIQfpjZ4gG7Bku
MD5:	A2EBD58B78BB4E11FB699A3FE5C4FE96
SHA1:	C11BA6E0668FCB6EC1E036188ED3AF415358746A
SHA-256:	EFA2DA0ED8EECAA03CF0FFD395B51D5FCF03FEEB1EA20A7F9F9D17C16A63496F
SHA-512:	2E453EBD70B50E6B8B115DF0296BEB0EDA64D37CEE0DF8C04C4C90C92C0D63662A23BEA6F3E866E6BABBB138EFE1A7A7C8A0A30BA7A54C034F83E62B1F15C4B2
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/
Preview:	<!DOCTYPE html>.<html class="html" lang="ru-RU" prefix="og: https://ogp.me/ns#">.<head>..<meta charset="UTF-8">..<link rel="profile" href="https://gmpg.org/xfn/11">...<meta name="viewport" content="width=device-width, initial-scale=1">. SEO .. Rank Math - https://rankmath.com/ -->.<title>...., ... .. ....... ...... .... ....... - . ... .... ......? . ... .... .....!</title>.<meta name="description" content=". ... .... ......? . ... .... .....!"/>.<meta name="robots" content="index, follow"/>.<link rel="canonical" href="https://faq-kak.ru/" />.<link rel="next" href="https://faq-kak.ru/page/2/" />.<meta property="og:locale" content="ru_RU" />.<meta property="og:type" content="website" />.<meta property="og:title" content="...., ... .. ....... ...... .... ....... - . ... .... ......? . ... .... .....!" />.<meta property="og:description" c

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (388), with no line terminators
Category:	downloaded
Size (bytes):	388
Entropy (8bit):	4.755353125511161
Encrypted:	false
SSDEEP:	12:oJvcLIpbQ0eWNmSM1JbuJOUa0epu+VA2KcAf8ijy2:CULuU6mSM3i40f+Viei+2
MD5:	F881DF1CEEE11FA83E6804188DB1F99A
SHA1:	B9BBB31A4A97715A3BD0E4EB932B29426FD1F59A
SHA-256:	0D96D5C7DD4E5D51D3BA167D24D4260D10A62EF1546B213883ECB4066FBD46C6
SHA-512:	F3542D951459A906A5809D43288001FAF719BF55569CF916304C0245DFC35ACA1EF8583F801C46D31CAD5EB5D642D4080BFC2138C9F6DD57B6B5448C7E9E9849
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/frontend.min.js
Preview:	if(window.tmpwpym!=undefined){window.wpym={ec:new YmEc(window.tmpwpym.datalayername),counters:window.tmpwpym.counters,targets:window.tmpwpym.targets}}jQuery(function($){if(window.wpym===undefined){return}const{targets,counters}=window.wpym;for(const target of targets){$(target.selector).on(target.event,()=>{counters.forEach(counter=>{ym(counter.number,"reachGoal",target.target)})})}});

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20087)
Category:	downloaded
Size (bytes):	20216
Entropy (8bit):	5.338721920008614
Encrypted:	false
SSDEEP:	384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst
MD5:	BA6CF724C8BB1CF5B084E79FF230626E
SHA1:	F455C5F153F872E52265F87A644FF89FE14A6FB6
SHA-256:	3FDDC6D28ABA3C13D64CFD4847C333FF48C71D4A5A58BD1A0494CA6AE8AC1BB4
SHA-512:	22C361E44DDE632DEDAFF2625F6631E2FB02BA3B6487097B48BAA09F02CD81FD381EBB7D053F525E52E56655B1F8E2B89DDCC0A002E1B0C35C0A6920823641D7
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js
Preview:	/! Magnific Popup - v1.1.0 - 2016-02-20. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2016 Dmitry Semenov; */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):window.jQuery\|\|window.Zepto)}(function(a){var b,c,d,e,f,g,h="Close",i="BeforeClose",j="AfterClose",k="BeforeAppend",l="MarkupParse",m="Open",n="Change",o="mfp",p="."+o,q="mfp-ready",r="mfp-removing",s="mfp-prevent-close",t=function(){},u=!!window.jQuery,v=a(window),w=function(a,c){b.ev.on(o+a+p,c)},x=function(b,c,d,e){var f=document.createElement("div");return f.className="mfp-"+b,d&&(f.innerHTML=d),e?c&&c.appendChild(f):(f=a(f),c&&f.appendTo(c)),f},y=function(c,d){b.ev.triggerHandler(o+c,d),b.st.callbacks&&(c=c.charAt(0).toLowerCase()+c.slice(1),b.st.callbacks[c]&&b.st.callbacks[c].apply(b,a.isArray(d)?d:[d]))},z=function(c){return c===g&&b.currTemplate.closeBtn\|\|(b.currTemplate.closeBtn=a(b.st.closeMarkup.replace("%title%",b.st.tClose)),g=c),

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1100
Entropy (8bit):	7.376279966987848
Encrypted:	false
SSDEEP:	24:BLnesPftbxYRHBmPrObGS3y6LQKea/A1c05vZx1:hnVHtCrmPrObG0y6UKV/A1R5vJ
MD5:	4A1E45E80D429FEF9DDD8D34D989352D
SHA1:	F61A1C2E9EE05236D6CBC89ADD14976EB05B6CD9
SHA-256:	56E24CDE5E35656334D9310A55EAB6C896396FBCC306D4AD3B89AF75877A5DE5
SHA-512:	BB02F4179D2CEEE31840183AACA364F211A2102F95D357C2AD576FFCBCC0CC33ADCF5300EDEAD3CF32573FA6151651FFF907F6D2133D7C2008B333BA2DCF8C2F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C....................................................................... . ..........................................(............................!A.1"Q#2aC.................................).......................!...1A.Qaq"2...B............?.....<....l.NZ.Ob8e.'j.v....UG..'...n.)@..m.@.........+c..;....sm.d,..R;...n.....}pi..4...[.o...NZ..=.w...I%..$I.H..WF.X....G.8nRAc.S..#:..&......b.C..8..&2.9.K1Oe+.n..1..M..m....?).f.L.0..f..h.1...(..zaW....f.w.b.ae....k,+..1.=....W..U$.....f..g...v...o..f..........j?.\..........;.(.V.]...~G.}......tLD.N.)...+..6".X..T...I$..x....;y...N?Oi.W.k.egQ-*._.Fv../.B.v...E.`....HO..r.s...k..Jp.&.T.......4_5.{....'..-k.....^h.._..z,DY#b..!.2.;m]Q..R....+.]$p@>D[5.....\|.b.)>....H..W\...C.Z..w4.L....F.cV(..H...E~...w.m;U.sj8ua.iBO..rGm.?....'+J.....jZ..i`...v..x.y....o[......Dn...v.......>.)><...GQ.....,u%.....[.J..+...D.......c.=..<..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2026
Entropy (8bit):	7.9033728543960535
Encrypted:	false
SSDEEP:	48:EEauUEW53GkejOPYWQFx0aW4oZm/w93vD8LTlyKr:suUfEkCRF7fB45MlyKr
MD5:	CE70E5B50108931129C8AA3FAB1F2E41
SHA1:	9FE56F844FD59DF38D6E3738F01D4637A1B1F91D
SHA-256:	83E07BE59B1D944B79DF98B504A482CCA8A912A4C4BDD4E8698AD3124DDA1855
SHA-512:	4349436F4CFBDAB9A803ECD529C743A2069FE7EB5C690A4FD92D8FC7FFD69B2147A8BAB5D04AB73C8C22ADA38D4FF8DDAD64F1B764B5A7DFBBE70978E7DECCE7
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/5551285/picb27d5ed63233acd4d9256fdcb60995bd/big
Preview:	RIFF....WEBPVP8 .....,.......>Q(.F...]&R...Z[..7......../.~.HQ...........@6.s.YA..Cl..\....z..k.....\|...........f.....;...?.o.Wb.EO.......p.y.........Hp.k.....Hk..~.b.9........L..H.....X.~I.....R.1L.Qsw..n.......yl.,...n.0<...Xy...Z.^..3B....2.J......0..{z.6e..".dv.{....,'..E...$.........._.Ff......L.Y..8.f.?./M\|..p4.C..;r.s.5.s...=....D........W....H3o3^.H0....3.....<p.....&qD..U.....&q.w..._.[..~..OD..........4.G..c.K/.{...W...We.....-...L.i.s_O ..t..fb}..:.P.T0:.y\G.>e.}..-...AdjX.d.vV.;...Pky..w.._.e.^.h...e.c...F.{.4....K..>...r..[..C.,A.{W..B\|S...(.-..C>8Z.T.($.......Y3...(..ah.+...I..1O).~...o~w.....J..........n ...-..>h...RXb..n7%....w.W.&B']..r.R...:I.....!Fl.%...[N%......_f..a.`...."..]9CpOa.....?.1.G...X1#...%.m..i.j.....S..`..En..Wy.*.Wq.)..p..2b..[......[..A..Z...!..^....SPfR.X;Q..S.I.N.a^.....zOs......h........9...x..F...P.l...6.0........G......M.1.....0[.~Z."C.V.......(...R..k..[.... ...?}x.w...3.......O....>O........

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	173
Entropy (8bit):	4.502191176368853
Encrypted:	false
SSDEEP:	3:UV95QFLPFmmdeBArjOAgJzFiBycNBWFEXA6XN+JPAGHVPFXAWv1vPm22UVHKRrKQ:UqREmkBAmAg54yczWo5d64GFdAo1veC8
MD5:	4D918A9D7EF2036ED7513FE40D4A459C
SHA1:	3B3A5F5E1887384A307DB01F43AD54F9BE6E016C
SHA-256:	136CF7E0D9D35B112B1519E512A12767A73E2FE2D73875EEDC65A74844332332
SHA-512:	E532D80B923BB2636FD342CC5AB4582C8E6C0DD66DABB2E4F6AF60119FFF25A9AD885C07A136450150E386FC6BDF54E635E802B52EA9B7C8343CD462606DB3E5
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.build.css
Preview:	/*. #.# Common SCSS. . Can include things like variables and mixins. * that are used across the project.././. #.# Styles. . CSS for both Frontend+Backend.. */.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 267x150, components 3
Category:	dropped
Size (bytes):	11564
Entropy (8bit):	7.959675921446029
Encrypted:	false
SSDEEP:	192:5jH0nVWP1aZt8rmIQVojDqiR1GmbN+zUuwHu0az9oIOAmKn95MHncLgv8SJD/Xr+:5D0IP188rH2KDFR1FZtezm095MHyIF/6
MD5:	7534D544CCCF2AEF14BD960D7E5090EA
SHA1:	8F02382D21EEB9ADA0FB6E941CFCC47097ABC1A8
SHA-256:	61D6C0CC59F6F959B6BF7AB935C7DFC4502E197727F451A686919DA79CDE975E
SHA-512:	B3CF9B3480AEFA9FAE570C915C5F9F4327D6785CE23AE19F7280EED9F4E1A46F7DCEE0B6D5574D264FD835A9B55D4E659D8027688E11966A45E3B441CF904FD2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................K........................!..1."AQ..aq...2...#BR.%Cbr......$&3sSdu....ct................................../......................!..1.."AQ2a.Bq.....#3R.............?....-.S[c........)."...#....@5(N?...Y..~4..EIzK.G9.K...s..".............Ghg<%a..............._.V._.;(^+9.a......O.....#....."UQ.-........f{..:.`.Q>..A0..=.L.p$l.2^F..#f.f.\g.....3ss.t.K.R<.zt..o.../..,@7J..S....k....y]....9S....AujO%.jT......Q.....F.w........F..#.N.u..Ib.G+8.;73.~.6.u$....J6w...}..dkniXB..?;u8..?<..T....H.P...J.....2...:.U..r#.oJ..R.$.?.M1.@......;;.?...\|...um>..u.}.t.xy....]..sq...?.\|.\u..ye.{...w.C.9=..@O...{....3...So..Ri. ....4..R...s...zQ.._b\e.....ne..K..&.. .......N3..L......s9^..#.?..8..u..E..?..<.,..c..d.6s.a.....K.$.%.&.o.D.4q#/g.ea..6..N.+..VT..Ji......:r.nFQ.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 199x150, components 3
Category:	dropped
Size (bytes):	8309
Entropy (8bit):	7.9380282184176885
Encrypted:	false
SSDEEP:	192:KEBkcGLQhgCh/c1h+zlUTcGT5/JtFHIM9VHWUMl/B:VBrGLQ2V1h+JUQGztFp9V2x7
MD5:	C1282465CB92F7A7555B08C097C46FD6
SHA1:	12727076D45308D3817AD2C007C3399C94D97A09
SHA-256:	C3BCBF7F9EEDF12C4CC672D1F118760A16EFAC41563C5829CB913C103E10FF6C
SHA-512:	63880823B28C6D6CCA49F33734629DB33C8EE245EDA18E6EA640BB2FF89CF4D6EEFCD3830355A162F646AC8D45714379B620747DFF3DCE5C4C29F5C1EFA0B717
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C..............................................!........."$".$.......C......................................................................................................................A.........................!.1A..Qa."2q...#BRr....$3S.Cb..cs...................................2........................!1A..Q."a2.#.....q.$3B..............?.!e......n.p.3t).JDn.#....ZD...0..k.......$./W..J....U=Ti....K.!.7.R.....8.....i.s....Z ;....G....r.K..\..n...$)...$...kCK....?YmP.d...`[d......9.lJ.9g...H{%..=3XZ.2....Y..................&3s..&.{...5...Y.@...d-^...".3..,....!..[VU.1...9..u.....NL....@....Z.5._qyi'd~.be..2 \....q...2...<..e.&.{...rC...G4.<.......S.#.UB.4.D5.o.8.Y9.A.....c.j...\|.6...:.........6[....XE...doB..DR.8...K..v..S..+G.9.Z..!I.# ...4f;..Nr.kWjy.i..#..iI..M... )k.%THT^RH1.Z>m.W.#....}C.G....B.;..3.Z....xV[za.o.#u(.K>$..UF...~.el.H~yU....f/......~.1.$8y.c ..s..U.....;.(5.e.......N..vR.JO..u0.JS....Q...Y.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 500x484, components 3
Category:	dropped
Size (bytes):	35034
Entropy (8bit):	7.9554705968228205
Encrypted:	false
SSDEEP:	768:lZVXeM5XOF1pHFqw9JwseFlK9wSQTXdFvL6aWF6oPML:lZVXjRiR7JdwL2aWFXPML
MD5:	DE25ABC2FA87D02B87D6DDFABB12B1EC
SHA1:	E45F383ACC8448AC47AAC6690D519F8F8AC146AC
SHA-256:	CFD54527BE859E099E5D782841CA0A875F2795A5764F3BED54864B467E1AAE6D
SHA-512:	05EF4A7EA7ADF2593D6591D5B421DC946B2FDFC5797800374C093F23FC1B64DF6EBAF69F1B9139C243BA0723725BDB7ACA39CBF5B15FCD70D8429C123E3FC63B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"...............................................................................P.................................................................................................................................................................................7..=5....D.m....................3q.sS_P..h....~wu....U.f.K..+Y.'<.ob..{./.;...a.................ix.:.=..........i.......B..Z\+J...U..?-X.T....:?2..x.....z./...o.."{..X.........+..F..m.f.B.n.C.........k.;X..4ic.6f..^..-.f..euq#~.....c=.Z..T...[Ob..j.W.Q.r...O].V..C.S.....8...... .?.....-............i.-...]8.{.:..........%SZ_F...M{.......BRcg......"cG-..iY.?.'..pY........5..Nc....1.5.d.....2..u..CCL.@...h.\|f...:...[v.N....2w.$....Vz.Q....:.c..V.t.......f.Vc/.za..`.....-]lx.l..L~L.K6.1.....K.X..^..j.M,.W.bF..:..U.....$.A..ni

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4190
Entropy (8bit):	7.951019909594253
Encrypted:	false
SSDEEP:	96:EI/zf0DmHOZvQz5SEbMTPiyrubJzYefOaWFNuK4hbB0VLEpF:EbDmHOZ23bYqFNk+zzBqVLE/
MD5:	2427A556862DC6E3E9DC902F4B224DC7
SHA1:	891B2A3D884CF9C6BD373D52772A9064DEE70492
SHA-256:	8501F1B1987FA8E11FC78C6E7AED773B14F60E6AE7A19E70BEAFE14F2C033C90
SHA-512:	9961C8E20AA760AA17CB547D73F86EDFE0ADD969A49FB95722A63513AF20E1B7DD3A4A462A71833E118928298CD0FA3A90EEDC6C405FE06B76826B17F22C4E2F
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/x180
Preview:	RIFFV...WEBPVP8 J....O.......>Q$.E....r....Y..M...P..d.8............_.......v..~_<..[.7....^..L..~.~.z........)...W.o.^...?i=..d.Q....._.O...A.._M...O.?..q}........B..f........h.f.........9i\|W~........OE\|..Y...:.LS.&Z.;.`.C.!.,....?.K.....5.(....F....{......k-..J..0%....3....Q.i.y..r.?M....X............-..)h..?.I<.<.j...BK..1..SkS.&.r...Z"........Xl...Y(..8t.......c<j..DS.....J..l.,..p.]...,..bH.^[..{.G..\C.On.U\|....E..8.V=.Ep7......w...,[~..>...-.Li..lo.`C.9......JA....L(X3...w.S...,...>.O......t.>...f...Yu.=....$....WQ-..9...>e......!...CF@...w....&..@..1...........O...S.7"pT?.......y...-..Ewr..r.j.....Q.......;...j9.....r.$.....v...Y.....l'.da.?..FZ.\.>.5.+.y.;H".......[.K~}..l..?.#...........;...:A.uJz.r'..x....9.i.^/.-;.j^..lj.I.z4...[..Fzg..S.\.......\|j}...u...%/S\.. ...Z\.&.\|...R....5...<=mYP.......di.SDm.o^.^..4u.o..r....YM..e.....@.I.+)...Y....w...F.... Sx6r.S...B5C5.=.m"ZMO..z-h"...+..Y....H.eS......{X.6\U...@...Bp.k...\.T....'...

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1464
Entropy (8bit):	7.818589258484129
Encrypted:	false
SSDEEP:	24:U9GvnZ3Hy7JQ2Ot2Y1bT4rnrPZsmjhILu7eysOJslYZykHCODV5R17M9:6GR3HqQztArnVh1KToJPDRe9
MD5:	57F203856A36638EEA57C5D4AD018098
SHA1:	CA14C5777F7EDF5A87B180EB9598141E91EA263D
SHA-256:	3D27E97E56335C5E0134359FAA896F1E69C3F18E570F46EAD147BDC7098A0B2D
SHA-512:	B319EF2CEB900BE702E8CE6A486A21DAC87C9F411132B5B6A92426C3CD7E7B83650A043E4FC3057EF0F3A9743D0F2757D963C91063B23274D3E80C63550288C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....#I....SU.\....m.m..x.m.wGWI...z......_..)v...g.9W.w>..1....-..d.(.....\|.X].&>..?A....P).}.+L....!.gf.IJ)]".lI....Q...K.S.v..X..86..7<X.....1x... p.`....m.......qL.B. ..i.t..wu!...$.KJ...l...M5R:....jW9Wy,^.......M......R.F...HmT.\|H..aL..s.K.k+....C......`?...@O.......Rv...M1.C..9JQ.j..f.63{.R:.b./q6`.p.T..=..).....-../o.gN...f.....R..L.;..>.>O..d..N.=.........P.An...4.2,>.....B?^q....fV.b>...fv.(.RFe#..X...z=.5.?dp_....?.X.m....v...>..z..h~...E...f.Z.{.....p..&..@y:gf..L...D...0P....h.. Y..0J..2..bz.~..D..,..u.x...f7....6B...k..1E._..(.o-..!....2K..?.?p:@`..L..tm...$.....'.v...F...x....E4u..k......a..f...%..O]..)......%4.:.....,..b%.......3>.^......Uf...H/....Y..3.x.....j.fZ.m.X.~......R....-....aL...'.Cz.\...0V.".f..K.3+....P......./.t4..r.x....f....G.K.+0.x...^.....(@.....U......)....Bn...{..Ea.W!....m..ZG=..\|.P.../.]..........."...4@..7!.h....jV..1.z..?..GH..;..E.K>....h...uV#.S..0.).....7v

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	104498
Entropy (8bit):	5.2704401494440605
Encrypted:	false
SSDEEP:	1536:YITXcJ1GEjkrMI6LpBd3/lCuHxnhKWEDUJza031eIkD2qtA4bB9UOPWi:YITXcL3CuHxhK5CagMIkD2T4bBR
MD5:	FAD15DADF56FC1D71BE6B240CC30B915
SHA1:	BA1E0470B10F258C83B81650520198579A7E5DFE
SHA-256:	6FAF9B3930C127B8BF7D97F22A50832B6CF0AC678E16BA6FA412E0A5EC06DC2B
SHA-512:	6E73A508A67BF235F96BDBBD747426A88C4FA90718AAB102573F143B19F4BF40BB7DF99AC8B05B61891D61CE07C828F01E06329F5DD720F0497E4B5594119DE8
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/q/set/s/rsya-tag-users/bundle.js
Preview:	!function(t){var n={};function e(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,e),i.l=!0,i.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)e.d(r,i,function(n){return t[n]}.bind(null,i));return r},e.n=function(t){var n=t&&t.__esModule?function(){return t["default"]}:function(){return t};return e.d(n,"a",n),n},e.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},e.p="",e(e.s=130)}([function(t,n,e){var r=e(2),i=e(18),o=e(11),u=e(12),c=e(19),f=function(t,n,e){var a,

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 180x180, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7814
Entropy (8bit):	7.966932275954139
Encrypted:	false
SSDEEP:	192:V+5ggpN8frT1wADhobTzFWoghpV6UkEXYE44OzoM5SwnsUYE:gj8frpRPoghpVzkEXY+OzcPE
MD5:	4E9651526DA2E6B005BE77811DEB7DB8
SHA1:	BFE892C494F6B875B2013AC9705D56E01DEE16C0
SHA-256:	DC62E807DCA3215E23609DAF36510437B1606EC2B5E870E2BA22A3B57C833D18
SHA-512:	929F7BDCE9030A9F30C5821AB8FB57394F4EFF965CF25678B04F5D9DFB08EFDED0032F90B04CF1BF65CDFC7824995FC82607D596DB96184E2B92822C442AECAE
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/x180
Preview:	RIFF~...WEBPVP8 r....r.......>Q".D....cD...Y..1F.......f_.%...../.........>......~Z{\\...r.S......S..2...........`O._N..T.^...'...................o. ..?.z`{....u......Q............`.V.....w....z..................x.#...?......o.O./.\|N.................._..C...?...........x_...?........u...-.........q}.~..+.............;.U....o..s......?..+Q...dlA...<(.R...34r..b.;V$....W. "E.C....(aRu.0'.hU........G...!...3....rP.t.M..4...{*X...b0.....7x.... .#..oGU..8O!.5....o....k....:.}.k......dE]I..O....Y...q....J}......m...V.r..CD$.....K....Q.z.j}.FS@lQz....X.6../....#....8%..D.m..ib.9T...C...@C..Nh.<:..=.Q.Q..Q.t.A..`..\|.>...S2....L%.....y..9.O.:<.N.j.........d....#O.......I....j...1.,.Ng.....h......b..u,.<..........q. c.....IZ...S..Z.(...'h..n.[%~5.h~.s"w...ZV`~...........S%f...5.bg....Q.v......[..}r.Mo<...#......s4UQ..xZ...UQ....>...A=...vA...~...g.R>..Q....y..c..-.S..4.)..7............_...k..G..~>Qp.h.Y.ZM...;..\|.e.<...!"8..P..I

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x180, components 3
Category:	dropped
Size (bytes):	9925
Entropy (8bit):	7.94128550530821
Encrypted:	false
SSDEEP:	192:ALucPwNAz974mMHsnQBWTMONZQmJPdMw+pCP/eq/C+U5GQgeAAZe:Aaywe94mMtyMONZQg7/emCS06
MD5:	1526F35D7C8B8076D3578A352DAF5F13
SHA1:	FFAE992CFF91BA0C80CDB0DF090BCF8817093473
SHA-256:	CF02CA02317FCC70539471E0E32D2DFA6A9CD772DAA610A475C8736D8D7740B7
SHA-512:	7E2810DD4B308B48B2E4C856E37EDC83FFDDA7553E427B97B3B0250C494D5E62B654A7386D7CF50A84475BF342DDDB918258881C7F9477F894E47A29CA278120
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................D..........................!.1."AQ.aq.2.....#B.3Rbr......%CDSs.....................................9........................!1.AQ.aq..."2B...R.....#b..4r..............?......R...W8......0S/D.!^b.&....(.......PhA..@.F)A..@..D*M........Vpj0+.;....O)9..1,e..8.cxp....\f<...c)....m.U.....n.Q{.....>k....}.oPu:[.....1..e..#.\|>..E$.k.t....m....m(...E..Q.....@...L..\R.qK$.^ .7..03..uT%..pt..N.+..r.u..}...NI.y.J+].k.4#.....D(.(.AN.5.5.V.G.....P...F.:c.M/d....RB.v..(KG.I..Z8...LN9.b..Iu...."/...Q....-I..4.}.m........\|6.\|E..C`...V'...V=.b.....!.-.s..R...h.)..+..\S..C.....~...Z\6....U....b..P..s.5l....m.$...e)Q.....I.6\4.L`.b.h....k.R.&3.K........)...NpG,.'...h'-.5.....]@.U.4B.[oBbE.>...fM..l.>13......(..q...v.t....h-...z..}.y.i.)....X!j......v...}......2

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://match.360yield.com/match?external_user_id=72cd074f-1f56-429d-956b-4f5c3854b25f&publisher_dsp_id=429&publisher_call_type=redirect
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 180x135, components 3
Category:	dropped
Size (bytes):	9460
Entropy (8bit):	7.942448009233467
Encrypted:	false
SSDEEP:	192:jbqAkyvtz9dUsZd3Kr3QQLJkzUuUSwK9Ak9Pcf7XTqpsGSdtQoFGI8j/:PqByVzhZM3rJRSFako7j/tQoFG5j/
MD5:	889D80B2B4068E2948D0B45712CFCDE5
SHA1:	37252424715999AA7E75211F8306379C298C8BBD
SHA-256:	447A864838D79F73119D32F3F1B0C3F192A85CA8B22AC6F784194A991105541C
SHA-512:	86F6223EC96ACCC89CA3FF738D7E5C8087DDB010A920BFA110775827AA565933EAF51684072E4862C0F6725523CE9E40F0D2AA450959F552BE9AABC164566067
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"........................................D.........................!.1.AQ.."aq..2..#...BR..Cb.s.....$%3DS..................................6........................!1AQa.."q.2.......R...#4Br..............?..~.Yk...U.....NRF..T.#...p.q.....0v.`...>Z.St.V....^...T@..1....l..?q.W...::0..'...Lm.U...8....=.j..F+].......xwG;..d....O..j.E{5.n@K1...M...?@[.7.w....{.........>G..St....[..S.<$..bVB..3.9.....hVBZ..'..R2`.B.......L......63....?MC"P.o...ie..........s.....D.jq..F.d..V...OwD.(.p..r.........cx..........j....'...9..T.....I...@.Ae..mH.1..\|..c.."...;\|.5~.).#..kV..7oewPN....[a.....l.r. ...8.y...G..E..+z..m.;=.UJ..U...U..L. g.dk9.9.P..0{."...nY$..,..........+.w..Y..q'.{w..h.,.'..Z......x. h..V..6.6......2..G})..-"KQ4PV.$N.r....g._/..V.U4W.j.t...@.4lU..........-K#.=.s.._x.,0.9.c.E/V...n.i-.W..

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 267x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13092
Entropy (8bit):	7.9841095128995185
Encrypted:	false
SSDEEP:	192:se6UR4dT3oM56M6TrfEWbV7SLwNt9YMsyFRFbJGOpPigZTn05stsiwtEPPYA4v26:se6US9/6vtSLwNjcyjxZHZg5LcPGv26
MD5:	8AEDFC7F14410D54A4F460142D8CA7D4
SHA1:	1184FAC32F991EC56ADE88C6A5A29B45E08CB633
SHA-256:	DCE847B8E6B056AF6C7BBCF0653ADD70233C1F455F873D67219191F8EE3C7BD7
SHA-512:	570B7F2246EEBDDB5938167E175E2EA1BC24D27AB66DEBBF30CC9EB8DBB554CB8BADC8695103A31433E5334EB4B159E50C8821A7CDC03B5312FBE5C4ACEB774F
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/60662/EDT16RXL_Q2jRqVylYA9UA/wy150
Preview:	RIFF.3..WEBPVP8 .3...........>Q .D#.!....8..../..yQ....,>}9'..x.{.?.?.F..q.?5.;...o........n..=........{...../....x...........&..?..........g.c./....`_......3.....?.......K.o./.?.....u\...?..g\|....?.?d,u........~............-...g..._..!...:.......+....w.o?.?........_...........l^)...r.{.....Z.....K./........{....7..............E..........eN..7\|Y.&.[......$.s...].M(qT.`....r.i.. .G.jk....L...7.wg{e.....!.qa.\|m]f..E..x.k.i...&_....!?......!%...%n.Y4my[.9....<N..vT1..'.T...v..S..X.uI.k.D..s....{..D...,..#g.{.\G..8z...:X:UMn.!..U........U.....lP..DA.....#.S..+.n..XY. ....'0K..8..[..1.7wHk.0..~..L..E..R.....1&rH.."^....}.+...V.6....k4..[P..j2.KLL..@.......w....:..w......k....3.z`".1.vsrTw.(.-...........Z...2.......n..9inQ.$....mLi..L.. .a2..}...V......x..R.q..qmhp.oSS.Z....Aa......~.. ...6-y/.O.....<...c..t..pq..\..~9...D.q..cN..3`0......."...9....\|.....G..4:...._.0....*...'..3..N...sx..2...E01...s..D....g.b....e.oc.../.9..`p.@\Kx...obn`]..ya.i.@..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	4.904898110234922
Encrypted:	false
SSDEEP:	6:zmSM1JbiXDp/1hyKeC5pM3M1NF2J7rMiXLwAGZAp2lAin24cN:zmSM1JbuDHEKPYykrMQ9cAfhXN
MD5:	337790D37E9B605B3F300C477C965E97
SHA1:	7EAD47C6331A8003B5699C6D7EB2D2629E3E3497
SHA-256:	46BAE95C6E0C96A29521BD1A0EC17AAADBCAB92B3701013D85F7E065B627C9A1
SHA-512:	CC00C4AE08B3869AC9B0C501539ED1B70D8C9E7BCC81CDDDE81E8777D2FF61D2865021512B50A9975C911F85C26D2F2E16FF19FCAD1B533DFE3B32E650D94B36
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/wp-yandex-metrika/assets/contactFormSeven.min.js
Preview:	jQuery(function($){if(window.wpym===undefined){return}const{counters}=window.wpym;$(document.body).on("wpcf7mailsent",function(e){if($(e.target).find("input[type=email], input[type=tel]").length>0){counters.forEach(counter=>{ym(counter.number,"reachGoal","ym-submit-leadform")})}})});

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://ad.mail.ru/cm.gif?p=155&id=80FEBCAD1084E9B5
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (561)
Category:	downloaded
Size (bytes):	207125
Entropy (8bit):	5.5197580197116505
Encrypted:	false
SSDEEP:	3072:1sxzMp+dUveG/wXpcyAaJWDFm4WHU/sseLkuMXg:1F8izwZQaJWDlx0IuMXg
MD5:	3CE56DAF35DFA19D0D99594D0E715F58
SHA1:	609E978BD30485AED6749D750D9F2E70D4A997DD
SHA-256:	7BB587FBA9EA4ACF925B622D709CEC9D2E36771E9C6F89A84B70A8A5F9F1B57C
SHA-512:	63ED0C5C119E23925854D29E7D814F7A1FB0F8B7F9C682801EA367341609996A24B25718192EE092D7EBAA6B4BBE7850031FAF6858ADF9C3CD04B26B34E7D9E8
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.ru/metrika/tag.js
Preview:	.(function(){try{(function(){function Te(a,c,b,d){var e=this;return A(window,"c.i",function(){function f(u){(u=Ue(k,l,"",u)(k,l))&&(aa(u.then)?u.then(g):g(u));return u}function g(u){u&&(aa(u)?m.push(u):ua(u)&&y(function(B){var N=B[0];B=B[1];aa(B)&&("u"===N?m.push(B):h(B,N))},La(u)))}function h(u,B,N){e[B]=Fl(k,l,N\|\|p,B,u)}var k=window;(!k\|\|isNaN(a)&&!a)&&Rd();var l=Gl(a,Ve,c,b,d),m=[],p=[Zg,Ue,$g];p.unshift(Hl);var q=E(S,db),r=L(l);l.id\|\|Ya(Ac("Invalid Metrika id: "+l.id,!0));var t=Xc.C("counters",{});if(t[r])return qb(k,.r,"Duplicate counter "+r+" initialization"),t[r];t[r]=e;Xc.D("counters",t);Xc.La("counter",e);y(function(u){u(k,l)},Sd);y(f,Td);f(Il);h(Jl(k,l,m),"destruct",[Zg,$g]);Kb(k,D([k,q,f,1,"a.i"],ah));y(f,U)})()}function Kl(a,c){var b=""+c,d={id:1,$:"0"},e=Ll(b);e?d.id=e:-1===b.indexOf(":")?(b=Da(b),d.id=b):(b=b.split(":"),e=b[1],d.id=Da(b[0]),d.$=Ud(e)?"1":"0");return[za(a,d),d]}function Ml(a,c){if("*"===c)return!0;var b=Q(a);return c===b.host+b.pathname}function Nl(a,c){

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2946)
Category:	downloaded
Size (bytes):	2981
Entropy (8bit):	5.174465669703351
Encrypted:	false
SSDEEP:	48:Q7A9/XN5NjJE2aAOuRUUKfTGwAuw5BJmVhl2qFqyvQyOw835uuPkSEwVYql+9y5l:931Yf1AJ5m/FqyLn8pu4Zl+9y5It4yO9
MD5:	492F2C1A7EA7EB83FE42E0FF7CB51AA2
SHA1:	DB36A77F6AAA2063BFBEC02C2C0E967438C5A245
SHA-256:	E174A58A503AB84B3D1B9DE12FD3895788204485170F1289E445F7B5B98EC789
SHA-512:	EEE6A1C268A519F4F281B2D76B5193BB068E94D1410372EF062587888589E139B20BB635E2331E97C857D7D835E9372F50822C5DAED29B139AB91FF5633C7A7F
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-includes/js/comment-reply.min.js
Preview:	/! This file is auto-generated /.window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-temp-form-div",parentIdFieldId:"comment_parent",postIdFieldId:"comment_post_ID"},e=v.MutationObserver\|\|v.WebKitMutationObserver\|\|v.MozMutationObserver,r="querySelector"in E&&"addEventListener"in v,n=!!E.documentElement.dataset;function t(){d(),e&&new e(o).observe(E.body,{childList:!0,subtree:!0})}function d(e){if(r&&(I=g(b.cancelReplyId),C=g(b.commentFormId),I)){I.addEventListener("touchstart",l),I.addEventListener("click",l);function t(e){if((e.metaKey\|\|e.ctrlKey)&&13===e.keyCode)return C.removeEventListener("keydown",t),e.preventDefault(),C.submit.click(),!1}C&&C.addEventListener("keydown",t);for(var n,d=function(e){var t=b.commentReplyClass;e&&e.childNodes\|\|(e=E);e=E.getElementsByClassName?e.getElementsByClassName(t):e.querySelectorA

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7540), with no line terminators
Category:	downloaded
Size (bytes):	7540
Entropy (8bit):	5.134252042973746
Encrypted:	false
SSDEEP:	96:ng+t3RyPsefIJ4W58JbTfkpPbSrM2L5oCqMC9ZqTg:vXf8bQdbwM2LrgZEg
MD5:	C7FA7B324BAEAD665D76A2FFEAB04152
SHA1:	A955C9646A728F8250F30E13772D129A3E0E2877
SHA-256:	CA63A56D305249EB4CDDEEC8A6501010E206E110445F46572BE1F2D56A1785FD
SHA-512:	28F9F7809ACCBED5769E8B94BF76910EFBC48E13D68752DE27E012C3A73AF25C2D29C7AC69F98FA533986A41DF5FC492E6C8351E463DF43E895D3E01A927CFF8
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js
Preview:	!function o(n,s,l){function u(t,e){if(!s[t]){if(!n[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(a)return a(t,!0);throw(r=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",r}r=s[t]={exports:{}},n[t][0].call(r.exports,function(e){return u(n[t][1][e]\|\|e)},r,r.exports,o,n,s,l)}return s[t].exports}for(var a="function"==typeof require&&require,e=0;e<l.length;e++)u(l[e]);return u}({1:[function(e,t,r){"use strict";Object.defineProperty(r,"__esModule",{value:!0}),r.options=void 0;var o=oceanwpLocalize;r.options=o},{}],2:[function(e,t,r){"use strict";var o=e("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(r,"__esModule",{value:!0}),r.default=void 0;var n=o(e("@babel/runtime/helpers/classCallCheck")),s=o(e("@babel/runtime/helpers/defineProperty"));r.default=function e(){(0,n.default)(this,e),(0,s.default)(this,"focus",function(e,t){var r=1e3*parseFloat(getComputedStyle(e).transitionDuration.replace("s",""));(r=r\|\|600)&&setTimeout(fu

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65494)
Category:	downloaded
Size (bytes):	120546
Entropy (8bit):	5.354247774554461
Encrypted:	false
SSDEEP:	1536:m06yQmGooqp1H3xeFoejoE6h9Eor+01T1bt2CxSBJ2n22ty3O5:/6yN7o6ekX/rd1TltxxSB0n2Cz5
MD5:	3295708DE63D95C4C4E07A97D75FFC1B
SHA1:	6F78AE845F2159C017EEC7AB8B560D7C05802602
SHA-256:	9AFF1E9197E4B9D23668B36BE6C8E6D2BC239190EEB664FC1D9D18A50F492B94
SHA-512:	105A1977BEA2F01251A0B6643DCA29064B2588655BF34D3CAF6A6AFACCE0B60E778BD2B047DD753D6C8682EBEE4426DCB87C15CF6ECF423ED5FE326E38F1D10E
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/937691/a92bedce4b45bc60c7b9.js
Preview:	/! v:937691 b:default c:adfox_banners /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...r){return n.apply(t,[...e,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)e=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");e=n[o++]}for(;o<r;o++)o

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 267x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11504
Entropy (8bit):	7.983416370429882
Encrypted:	false
SSDEEP:	192:yA1PBaOuBDpaUiX0z7FD+LIGXoItBcr00/p7918G5A43vHLeWQWjExfKHSvuW/FM:dfu1AkzooIe0gp918G5ZvHyjWWfvvud
MD5:	3EBD8DA486D27AE204A337BC01950953
SHA1:	ABD6421284D69917C65E03ABCBD1C183B1611C72
SHA-256:	BAA61EB79A4540601269F2716ADDE89CEEEE00C18548C9B9C3586FA060335B12
SHA-512:	52E25BBC4C9587D3D3542048B4D698C5AFA48BFE20A1A813F35FA5F86F7E79277F4BB609CB610208110E7185E2E637118786796CF3C5831486EFAC32C7CD0C98
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/4797691/kHoy_oSb5ZcwSmr86_-79Q/wy150
Preview:	RIFF.,..WEBPVP8 .,.......*....>Q".D....KB...X.0....O.~?._I^[.[.z.[.........?...{1...g.........O...J.C.....3.w...'..P.._...u=..i}7.u..?...... .W./.}.../.._.../....g._.?......g._.\|A..._.?.o............_...x..?..............~....../4...E........./........g.K.#.......>......3...o._.=.=.zL...!C..\...4..ZC...0.....K.......}.07.x$_.g.O...J+.@n.B..v^wJ.ND...~}....?c.I..~.lm..y<}...Y.......O'....(..X3;...q..Iu;.g.....+T.....h.....i......\}.%.<....2.<.&H.n.K..F.3fp.....G4....tB.T....OA....}XT...f.......:...K....>.b...m.=j.L.}P..iR..h..g.C...=..mF....sn...^.>\|.............k.~^..i.......(.....z....z.r.V.:..#...-...f..C.p.N)$..hd..\........8...;...5..+..{:....F.\|6...../.....`.h..Z.8q.Q..T......p...sr................Q..5......rg..+ ..S....Bq.....#..R..U....}Lu.8..J.};.J[..n....1.......'.sq7XpS....l...R`[......s.r..J.....J.....c...h....W.f.....r>.5.V../8...'......_.........N<L......g..}..'"\|.>..'....i.\...9...\|.\|........./....m..#......3s..$.".

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	992
Entropy (8bit):	7.730156051289426
Encrypted:	false
SSDEEP:	24:QeU5RQdUKrIGO+DReuKZreO9gdzF2y2kS2Ammidj:94R0U67pNePZaO9sJ1HS2AJidj
MD5:	49FF18B13A22093F71BB75C5FC66D7DD
SHA1:	E20AB2A02EA225B705B52F5177BF95F7D1575C2D
SHA-256:	2D5D9E1DF1250F92D9ACF13FB23B280C626DE7767AFF80B293FF73A5FE7E1384
SHA-512:	055E23D2EA8BBDD878264011B275E4970F56F18319B0712C987C77F2349078EA6809C74AAAB19440CB1A0859D2085C738D0E9DA414EEB5230FD25F8A4164DAB0
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/compday.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx...S..H...JU<..xm...m.m.m.h$.8{.s......".M#v...yI.w&5C_../.d$.)M...... ....d.........L...I.Z=.\gDX..)`.59.....o}.p.....s.w;...-.8.......ur......YV%..j..K.U....+..~..?.W..... .......G.zbS.....K..5....z................\|..z.'.....~.... ...?.......3..d.P..l\|.}8......._.U.m.6]b..+.`[.0;\c.9'......7>.Y...O....3...~...........<A......B...\|,0T.EdY..\|.;8.r.@.......oQ\j..4../.ZiQ..98..h.a..0.J&..'Xh....K..$.M..,..?m...L.d.rt ..qd...B?.z....~.^..rP...g..w}.WX/..!`..a.....G.?R...^.....u..k.66..8..x.~k.K^...u..g.W..J}Z.:.........q...Y...d.\.h.p..f...i..`.I......~...........~Y....C.\..-.......8....]nz....0.b8...Y"......sB...x....;.U.n.../p.H..`q...l.M...&...'.j....$..../.].^..d.q/).3.<[.y.iU...3....[j[P..X.....Xv........./..n.T.5.&?......L.8.....%. \..h..\'.4..O....0...3....$..!......3.}....3.O...._'..!..{..m....V....+....3/....E.....y.;...kC..E&.....'..jk......../..._.........p^.#.....IEND.B`.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 500x498, components 3
Category:	dropped
Size (bytes):	28771
Entropy (8bit):	7.951030481491783
Encrypted:	false
SSDEEP:	768:8mLfhR3gyYK/kwOvyKYvRlj87tiJf3JhKyG6iCRs:8mLXhqwSyx5VgtiJfiyniCRs
MD5:	12DCC05AA9AFAB6A514E86D5FD80F734
SHA1:	E7322C425CFA83DB26FC1EE2E16AB231478DEF27
SHA-256:	ACE5A34B6B32944DB9B53E31BF3C72186CB8ABC6B2DBE44FE67296FF66AEE6FA
SHA-512:	4BC2C1290288775A247DE43695E413471F5C6CFA77CD2671CBCB7BFBA95D4F892C549232ECFE3D99E6BA3272227808E40AB4A642830971C23050064F8BB6D57F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C..............................................!........."$".$.......C............................................................................"...............................................................................P............................................................................................................................................................................1.Q~.o.Z......................).[...9..~u.}_U..n..bL{^?..\|..Oiy.f...Z....................m..l.I....m...T..:.-..-.{-e.....e.v...{_W.;l....zg.t..}5....z..................%..w>....t...(.T.V..9...?.Lu...l..KO.D....d:...hj\..>U..w...>.....'....;..........Kc....^]+J....0...u..k..NF..5..^........~.....>.[.]......Y3.k}.q.Kiy.%l)L..e...9.z..k....c.......(...........J.L.UVcU]r.....M.>.'.>......q..Cf..ZA....S..".4..!0.z......_[b.a...d?.5.R.o.....R...P...I.............g.....vV=[..m..M].io.w8...m.fm.n...7.\|c.L..1...\SWoR.........q....yq....O....Eu)..5

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 199x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4684
Entropy (8bit):	7.959407052220333
Encrypted:	false
SSDEEP:	96:Eg8mN4Zj8rMs3bE0Wvc+2UpKUro58Ln6iRVTgfrrGslua7:EteajI3rovoTX58Ln6GTgIa7
MD5:	BAE00BB76092906A340F2A99D490B80D
SHA1:	338AA3AA7988EA77825B67FF9B870F86942B23A2
SHA-256:	F68EB5260733A1885E55655D70AC612647DA56B6AA9E5621EAEA0B6BCE639C29
SHA-512:	90BDF082A60ECE1C3FCB9189CA16A4D095FF9F0138149B059476CB0CA502336E5651E6E56917F861FBF5F98F33829CC156538BAD1658BC09C01E9AEB249B8CD4
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/4797247/ixuJwznszqKVxLJ3r4kPqQ/y150
Preview:	RIFFD...WEBPVP8 8...._.......>Q$.E!..=.J...P.(.........../."...on..g.f..5....x..........~.F.i..6.k.5...........:Yz.....`.gd...._.d...b;..q...xl...DOm..`.....?...FL.."..3.~...T"....0%/>.Iz].3....]."..EB.....Kn....C....[S9.&..J......y.".Ta ek...B(..x.J...M..........j.!5h..Vh../.?.\|..\|.Hd.d......q.[..8.....h#...`..[ ....N...I...<.7RE.....s.@.+d.....p/}6g....M..{F.+...u.n6b..b7...\.....T.fr...G.S..."R.C\.uP....5..3.........<0.......SS4.Z....5..N\|..T..q.....6.......:.............i.\=..K.t7......Y...N.Bzr..r<..m..YB......f...X.Y^....T......B.T'...=...C..f...B.xX....<.<'1.tN4....!X............5nJX......F......pI..~W.."+../....1.).G.w.Dz..uR..d....bv-Q.g-.\|.. ..#m+...B.jh....>t.O.s.....\b...4...oY...D.$.v.Y$.Y......K.g.L..\|.t..B..M.,.KP..LRaV.....}....ql..0_..~y.}...M.5.h.i..J..PbQ......,.e2..'V..^)....0..]f(..`.,.....R3..HdA.O`......D..Ve...Y..i............\|[..V..X..kZ.!.k..X...'.h.BQf...V.....[\c..l..T...:..Y*X-..Y`...HE.z..GN.k.........b

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65497)
Category:	downloaded
Size (bytes):	605447
Entropy (8bit):	5.552460563025738
Encrypted:	false
SSDEEP:	6144:M0aAa33XK/BMQNB5Pcq5AOPb1NpicGKUUnofK:M0aALKwBZpQ3Un7
MD5:	89D4087931DA164062A0133D201519A9
SHA1:	FCB304F755759C22076A1EED025466B1B9BCEBE6
SHA-256:	865E11124AF5C3EF37D096E3E7BCD203B405CFE8CCB50A96E853C632F35F073C
SHA-512:	5D7F1533FCAD505412A0D7FF1624C5F3B774E15C062C153068C54AE854D3F6D75C002E630822202D690380384528F4BE30243085B01410604A2E9E437CE024AB
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/937691/4c9a181cc3ad10f671b2.js
Preview:	/! v:937691 b:default c:advmanager /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...o){return n.apply(t,[...e,...o])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),o=n.length>>>0,i=0;if(arguments.length>=2)e=arguments[1];else{for(;i<o&&!(i in n);)i++;if(i>=o)throw new TypeError("Reduce of empty array with no initial value");e=n[i++]}for(;i<o;i++)i in

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10927), with no line terminators
Category:	downloaded
Size (bytes):	10927
Entropy (8bit):	4.669706074845759
Encrypted:	false
SSDEEP:	96:XWPv3fQEKIPm+d9uGiozV9Ks29ZbBSNUgr0DXi1MkSP:XBEKyuCDK/Zge9
MD5:	848B3D98A919B181AD03D17478E97B80
SHA1:	E05BD451823B6D37654FA624F3BECDE80DDDD939
SHA-256:	FE41A7936FBA4A26A21FACE5FBB35961E74B9B11EB9E78FA26560F6986BE6ED8
SHA-512:	1C7FD5664B71767E3279EEDE498872380A85D5347AD1A395DA9376A2F0EA455B419C7B2558DC9080BD134B79819F88FBBD3C3C65F9222548DCA7B22C1D051F08
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css
Preview:	@font-face{font-family:'simple-line-icons';src:url('../../fonts/simple-line-icons/Simple-Line-Icons.eot?v=2.4.0');src:url('../../fonts/simple-line-icons/Simple-Line-Icons.eot?v=2.4.0#iefix')format('embedded-opentype'),url('../../fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0')format('woff2'),url('../../fonts/simple-line-icons/Simple-Line-Icons.ttf?v=2.4.0')format('truetype'),url('../../fonts/simple-line-icons/Simple-Line-Icons.woff?v=2.4.0')format('woff'),url('../../fonts/simple-line-icons/Simple-Line-Icons.svg?v=2.4.0#simple-line-icons')format('svg');font-weight:normal;font-style:normal;font-display:swap}.icon-user,.icon-people,.icon-user-female,.icon-user-follow,.icon-user-following,.icon-user-unfollow,.icon-login,.icon-logout,.icon-emotsmile,.icon-phone,.icon-call-end,.icon-call-in,.icon-call-out,.icon-map,.icon-location-pin,.icon-direction,.icon-directions,.icon-compass,.icon-layers,.icon-menu,.icon-list,.icon-options-vertical,.icon-options,.icon-arrow-down,.icon-arrow-lef

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 267x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8056
Entropy (8bit):	7.974893269767072
Encrypted:	false
SSDEEP:	192:QG7iky9Eyl/NMczh6Kv92KSsRG8MLoj1RhQ:39yl/+cgQTvc013Q
MD5:	15B764FAA9AEE8232AACAEDA3FDCF294
SHA1:	BAA2BB1DB6D16839EA56A98F859128861122ECD8
SHA-256:	5D6E5B0AA7DA562F6B715EF88FBF2D87635AAEF13A3E67CEAA678A752CB25E5C
SHA-512:	2453350F6781D35A8B389310A1765BB33B68D92719070B6F89B7B5743328230964F984051CAE95529EB9FAC869621C99E63609802EB8A0A9A506113128417DE8
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/4667035/YnGXQRupS_9KfdsimUL6_w/wy150
Preview:	RIFFp...WEBPVP8 d....y.......>Q".E!.......So}.A..g.[..[".#8>.u.e.....>t{..G.....^...>...=..w.....G....{.C..A.......a................O..iO.^....e}.....q..=...?.~../.!...^......._..T.a..`.a...........8}g...u~........c.O.G......2..............~L?..W.s..._..?.\|..9...W._.O.o.....~ ?i.f.W.jy\vZ.7...8..h.......b.{(y..L..3.A%r.o>B`@p8.....q\...hi.;.]M.r...u...l..~..Q@.n...{.....;.rz..`$.S...%......enyU7...e.F.^..:..j...[E=..^..#.:...u.C.3c.;{N.d..&......`Q/..%Qi.W~0GJ....z......7....y...D.u..W.V....<R.P.(T..{.C.L......D3.-...HJR.AA..L(.....D.9.[8...S.%......byD^zz....-n5^.;.6....C7.D.?..qX...Q..%5.M.....G...k.......m.Y ..B...:.Z....&......].......M...R... ..a..C.......+..'.....C....A..^..ps)w..k;..K......4f.]z$.h....2..W....97K.s...V..t.{.vGL.J.es./[?...w.....,B..R....(.t..B.s....}m..}..[...S:p+jO...A....%zs.=/s.....H.@.s.....P~*z7F.^>`s..\|.R.?.(m.$.o...u./eg.N.\|......i.#].ZT.1g~......-....d:...u.)EV,k......I.Mh....}#..z\..2...>.g.D7d?.......

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	992
Entropy (8bit):	7.730156051289426
Encrypted:	false
SSDEEP:	24:QeU5RQdUKrIGO+DReuKZreO9gdzF2y2kS2Ammidj:94R0U67pNePZaO9sJ1HS2AJidj
MD5:	49FF18B13A22093F71BB75C5FC66D7DD
SHA1:	E20AB2A02EA225B705B52F5177BF95F7D1575C2D
SHA-256:	2D5D9E1DF1250F92D9ACF13FB23B280C626DE7767AFF80B293FF73A5FE7E1384
SHA-512:	055E23D2EA8BBDD878264011B275E4970F56F18319B0712C987C77F2349078EA6809C74AAAB19440CB1A0859D2085C738D0E9DA414EEB5230FD25F8A4164DAB0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx...S..H...JU<..xm...m.m.m.h$.8{.s......".M#v...yI.w&5C_../.d$.)M...... ....d.........L...I.Z=.\gDX..)`.59.....o}.p.....s.w;...-.8.......ur......YV%..j..K.U....+..~..?.W..... .......G.zbS.....K..5....z................\|..z.'.....~.... ...?.......3..d.P..l\|.}8......._.U.m.6]b..+.`[.0;\c.9'......7>.Y...O....3...~...........<A......B...\|,0T.EdY..\|.;8.r.@.......oQ\j..4../.ZiQ..98..h.a..0.J&..'Xh....K..$.M..,..?m...L.d.rt ..qd...B?.z....~.^..rP...g..w}.WX/..!`..a.....G.?R...^.....u..k.66..8..x.~k.K^...u..g.W..J}Z.:.........q...Y...d.\.h.p..f...i..`.I......~...........~Y....C.\..-.......8....]nz....0.b8...Y"......sB...x....;.U.n.../p.H..`q...l.M...&...'.j....$..../.].^..d.q/).3.<[.y.iU...3....[j[P..X.....Xv........./..n.T.5.&?......L.8.....%. \..h..\'.4..O....0...3....$..!......3.}....3.O...._'..!..{..m....V....+....3/....E.....y.;...kC..E&.....'..jk......../..._.........p^.#.....IEND.B`.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	979
Entropy (8bit):	7.701021737745739
Encrypted:	false
SSDEEP:	12:6v/7ioscjJ3CDaA6trNq1bmGP098zZGcEzZTf5ZmHTloos2h0cNUBuKgxc6ZVqNS:G4etr0VZ+zZTWSc60vxqP9hLqOTKt
MD5:	F476D638BF8521A7C7F73B6FEABB6E25
SHA1:	9EEE0649F97E09F79ECF352430E51794563F3C23
SHA-256:	6A82285840F81A972D3CD36C92770F8FEB8E555E70D1A4FD78CCB83E1A8BB27D
SHA-512:	A3E1932C8E11B95D871CD90FFBC27D39A2CAE88F8C3CC36C8E9C301B2DC85A4850F2F6A2FB90C1BD311A0690AF2306CFA7798158B1CA68258F6FEF28EE218970
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/steam.megakod.com?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx.bd....:.l........_'3.k.m.6...f....m.=.I...o....N.O.. .iM...B.C..4".we..'..9........J...^7...@...A...w.(.B.X.9..e.~g...m.aTP..f....ou1..i.".."...r;T<._.W..A........_@.:....+.t{....PY0$...m.p...........T..%^h1a..}z...>.&........1...Xj9.....u.cs.c.!4P...,n1.=....U.8^.L..s.............43....[EXo.v.W.+.?..--.jsy.....ls........B;..T@.B`,....e..V`...F+\.4.....~P......>.-...p..E.....8...+9&...f.{.[...b.;#3.....k...fNV^K.r&..]q5a..<...Pn."..2..R..+..}.s...~Se.8.........;&\|...j...^..Z..1.\|.o.ZIE.(1B".g.y.[.T...Gx....q.-m.{o......}c...j{..1.Bb.iAR.......+.nC_y...D.R..r...D.`:.$1.f.....#.\|.f...x.-...&Er.c..^.!.X`aa..<.......}.-.....^...w..F.oX.<.n....Jb......\.R...U^z..~..2......D.x.q;+~.u;...{3.G.N".d.n.....$....f.M.mv(~.<$...r.+...F%$.4P.m[2..x...q..^.....q.D.s.P~?.0...G+.........u.8D....A48...~.T.5Tm..rK.*.~..1..S.q.=..7u.@c.E.:R=.....'..9%m..............]......IEND.B`.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	959
Entropy (8bit):	7.745401360078138
Encrypted:	false
SSDEEP:	24:yvxjKkQ/YgkA3N80G0SGc2soUYR2E0DkRropfyHnOBelv:Exjb4kqNZc2rUYBMQOB8v
MD5:	7B2C85ABB95EDE0329B9FB472BF6BB72
SHA1:	F7977739F08FBF240687531D2D1BA7DB0025155C
SHA-256:	1BADC66DA59E2B6FAC0ADA9C0B6B7CF3355864438A58B5E8610E6A72224218B6
SHA-512:	19CF1DB99399C0DF0B6E92954A0E542E744371BC9FB264B36B6B5B03706700B66F578C554D34CB1D00C1A4254D68F7651857AC96310401B512BA992D20F5B6EA
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/manner-matter.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....`.F_...K.HH.".:A.@GI...A.-..,.,6..h.....iJ..?....x.^../p]..w....N.8.\..q.[......cr{..a.7f.&.m..\@..y.$..<3..<..LY...J...D.(.X.....4M8J).e../.....,..a.6.. .2. .b..{.4%.C.}.Q.i".s...w]..W..z......f ..j/.b.'...&.D.].l..I.(....~W...u....p. ..).[...u..<...;.0.g.t]..}.\.u(.2...}.s.8.4M.%I.4M.Y..o....L.E...l..i`]W....,..q ...\|.7.QU..$.M..,K....("M\|+.4.I......eY..yPU..+..5....X.p.'.W..5l..u]....!.......2.@.... ..E.$)(...D.T(.D..............ADI..""%.....SwCdkgv..?...B$..F..;..T..j.~...r....Q:.....1H.T.L&#..wQ..c..g.l6+.h....rLn ..\|b".N..n.KU\..].L&e0..b......~._......!.j(...je.......r.3.J........<...~...>.u8...z..\|..E.S...G..y..l6.Z.&N....@b..(}.Z.e_..Q...R).w..R,......r.=..{....M&..D"..tb.p8(.Pl7.T.....^..(.(......n...5..*6.O..%.y.F.AK9.......l.x<&..j......0V#\|..Z.....m9.N...........g.....X.m.XL.....C.........A.......h ..V....+..h.\|..0.Q..:. .....]........IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21914)
Category:	downloaded
Size (bytes):	57513
Entropy (8bit):	5.07702711242518
Encrypted:	false
SSDEEP:	1536:Xugq120spmYjfsSqxHowWtsSvURPQH0vE6YxkDda3x1KxuCYOjF4kN:egZ0AOSyRPy+0Oh
MD5:	0A54E842E3E395E6B9FCF6893283A105
SHA1:	E96D27E9C036DB495B6FE00CFC8A0371D7AADD74
SHA-256:	472C7748607B5B76986BB54FFE3FE79EA954F61705AABD2A0FA80D13B2EEE46B
SHA-512:	700F20720B5827E258A947BE8F625797A2778DB6A670C41F3DED093A64060DEB1C77ECEA5F0C209DE0F39E239DDE4F0F70EEC4B535BA8C0ECBE01871D37497A0
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js
Preview:	/!. Flickity PACKAGED v2.2.2. * Touch, responsive, flickable carousels. . Licensed GPLv3 for open source use. * or Flickity Commercial License for commercial use. . https://flickity.metafizzy.co. * Copyright 2015-2021 Metafizzy. */.(function(e,i){if(typeof define=="function"&&define.amd){define("jquery-bridget/jquery-bridget",["jquery"],function(t){return i(e,t)})}else if(typeof module=="object"&&module.exports){module.exports=i(e,require("jquery"))}else{e.jQueryBridget=i(e,e.jQuery)}})(window,function t(e,r){"use strict";var o=Array.prototype.slice;var i=e.console;var u=typeof i=="undefined"?function(){}:function(t){i.error(t)};function n(h,s,c){c=c\|\|r\|\|e.jQuery;if(!c){return}if(!s.prototype.option){s.prototype.option=function(t){if(!c.isPlainObject(t)){return}this.options=c.extend(true,this.options,t)}}c.fn[h]=function(t){if(typeof t=="string"){var e=o.call(arguments,1);return i(this,t,e)}n(this,t);return this};function i(t,r,o){var a;var l="$()."+h+'("'+r+'")';t.each(functi

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1158
Entropy (8bit):	7.788938368586607
Encrypted:	false
SSDEEP:	24:bWyOohvmwcrifeu2Y1tuAhmlAuToU1aMLkKPQNpK:G3vuTtuUmlFh1JL+E
MD5:	9976770FC5BE1FA5506E978154BAEA3C
SHA1:	81CD6F2258AB489E6F00DB526F2910924994E7F5
SHA-256:	9074A6BB5777E7BCC4956F062AB57260E740BC8B8E8297F6413CD16F504A84B5
SHA-512:	255596D531F86ECC64B5A1545D487270F7B635CA3F28A57F3BA28C9D462237AA46B332FB47630457175FF46BFABF30C98937525435A6999800326AFBCBD4EE98
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....MIDATx....t$.....>.8.m.6.m.m.m.tX..J..v.5.Q..;u,.dG...-..+.8P8..h.0\.o..B......@..pO..i.65..g+..{;.....C...Z.O...Y..h.[..5...rNa. .$...!.!4..T..-.10...~.}.!.!.".x......_}Em{......'....#.;...,.7.w...s.L.[....^0.............@0.0..c.W0..F.6(........P...../d.Z.,^k3x..\|.L....~..?..e..^6,..Q./..#..............I0k)$$.O..&t.1....8.........x.P....\|.aPs.....-......$..9.9...._...K.w..f...C...\%.]..(..2.+....z.~.o#.~....%.....r..V......g..Q>.4b..8iZ.Kl.t....qS,..wN....._.0d"w...A...............;=D'P....8Q;.A..P_.o0.z...4.m..X..^\|Zx.i!.}...................-.....rl..."...p....E.=..A./.>...6..w.....t...p..f.._.#.......'...m.N....e...W..Y.&..c`.T.'............P.>...V.(....9...l.@..F<f(`.....\|.T\|>....W.......apk.Y..\P..L%9..^.l.o.....d.L[d..f..*...-S.o.h^...."p....m[.......a.V./.....D.$`........F......@..=<..p#.w...e...H..qo....d.....u.#.O...0....g.....$....lqX.7.... ......._....Q...~v.P>-..[.XI.X0.:`.....8.v...xS+e.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5181), with no line terminators
Category:	downloaded
Size (bytes):	5181
Entropy (8bit):	5.135290829242171
Encrypted:	false
SSDEEP:	96:InYM4TkBw748JDKFDqhbr8OefQMQMAYP+:9lTt748JDKFDqhbtefhQMd+
MD5:	CAB72260C840201B4B6E0125B3F66AF7
SHA1:	CF137934BC4EF8C0B0C42C325F53F6C639985F18
SHA-256:	D05F3A54518CD3AC3A4E9B4CF8C5F0DEAB037E659299F66A534D00FE10618B64
SHA-512:	10F0BED1E14342D7C6A0C4294886FD1DD09F9632D2C03DEF7F9A93AD49E10C442F8D6D8B6BF4DE0AF3C3BBFA793781363A1B18B8D459CF01554A0AB3002C097C
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/select.min.js
Preview:	!function n(a,l,r){function i(t,e){if(!l[t]){if(!a[t]){var s="function"==typeof require&&require;if(!e&&s)return s(t,!0);if(o)return o(t,!0);throw(s=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",s}s=l[t]={exports:{}},a[t][0].call(s.exports,function(e){return i(a[t][1][e]\|\|e)},s,s.exports,n,a,l,r)}return l[t].exports}for(var o="function"==typeof require&&require,e=0;e<r.length;e++)i(r[e]);return i}({1:[function(e,t,s){"use strict";Object.defineProperty(s,"__esModule",{value:!0}),s.options=void 0;var n=oceanwpLocalize;s.options=n},{}],2:[function(e,t,s){"use strict";var n=e("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(s,"__esModule",{value:!0}),s.default=void 0;var a=n(e("@babel/runtime/helpers/classCallCheck")),l=n(e("@babel/runtime/helpers/defineProperty")),r=n(e("@babel/runtime/helpers/classPrivateFieldSet")),i=n(e("@babel/runtime/helpers/classPrivateFieldGet")),o=e("../constants"),u=new WeakMap,c=new WeakMap,p=new WeakMap,d=new WeakMap,f=ne

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59158)
Category:	downloaded
Size (bytes):	59344
Entropy (8bit):	4.717034908797126
Encrypted:	false
SSDEEP:	768:OEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:OE0PxXE4YXJgndFTfy9lt5B
MD5:	B227B1617A1763C8BC056772F05482B4
SHA1:	C508528FEB9FD540454F838653CD4863B290DF2E
SHA-256:	AF1E6EDC875A382B338BB25BD7C5C3F474A7F1B36212002A5896DD06F2186325
SHA-512:	FB8CC22BD93EA8D1544795FE70A2FD10847E64E86D225A0D97D188292E7B57533236C62961C52B51E41CF6F35FCEC59F576F0868B2F78BDE8FF6C74DC9E46CB0
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css
Preview:	/!. Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pu

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 30064, version 1.0
Category:	downloaded
Size (bytes):	30064
Entropy (8bit):	7.992477858631423
Encrypted:	true
SSDEEP:	768:C/3cATYncoSGwoSdfQjYvJ8I44idHfZ+4ko19Ux:C/7UbSGiJyYRN4RdBiJx
MD5:	0CB0B9C589C0624C9C78DD3D83E946F6
SHA1:	5DA603104D4D6E362824EC9E7DB32EB2D617949A
SHA-256:	104673F4859604362A18FC6294197D8FFFB8CB24AD3211E92EB04F655E18CF4A
SHA-512:	3E5839AC426D1CB1728ED26C5507985E0C0C8DA0E09A3391FF5F83C74B4AAB56E5A2D2ECC9C5640CD75C0CCB71211E5DFF2DA6844E45AEB45B8F72D251D6F9EA
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0
Preview:	wOF2......up.......(..u.........................?FFTM....V..b........%.6.$........ .....8.c.UF....$.C.D.....+..s..c..@Zf...$.j..,.........is..m...p......^.=...E...}O.sI..0S.l...\|...E...._..t.?...M..J.X.F...!.Q9\.yHx5..k.....5pG\.G.qD..8.88".D.U..T...c.....s&.5uC7s.......5'.....I...f...o.....sE.D4......=.....p..X.g....S.....X...H.L.B....l.q%..(......T..........@d..R..f.5.........Qx....H..I....L`..0:.........r...rv...J.M...FJ.je...d.p@..A..R.\|..O.'.w%....&..9...A.I..6.q..G.Z .L.4.[i;`s.;...e:\...........w..q#xF.W..$..?.`...u....E.O....U.....9...s.Pt)T.+..{ ...(.$e..=.)."hy........J?I.R$@.CR.,A..~R......R.9.!...~...6.v.Z.8.>A..f:. ..Y...5..sJ.n.;..A..H.P.Da.U.3...Z{...('.<.9.... ...m5...=.5.rWe?.@3.....F\......q....,..,e...~........#, \|..:....Pa..\.B{. .X..Q.S.Y.x.{.=...S..}.`.O.Kv". ...8.jk....`.!F.7...Xy...M?...\p(....@.RJP.....<..hxJ.<.<PE..!`.yJ.l).......[Z.dO....R..Dh...Xp...u...\...NhJ*..D......5...tX....r..0....J..%...?k.H..uPv.;..0

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65492)
Category:	downloaded
Size (bytes):	352137
Entropy (8bit):	5.5906418523023795
Encrypted:	false
SSDEEP:	6144:cx4E+wJxEi7l4POrDogR4CCQ9ouFmB7zMYHK0D:ufJxEi7l4PO3hR3CQ9oamB7zMYHK0D
MD5:	095A970BF09BF2E6A99D28935CCB7D29
SHA1:	06D4221A5C4F5E6A66119C9342F4BD4DC529C1A0
SHA-256:	F023F7C396B6F492F3DE1166E18B9CBF6B046635572BFAADB717C1DA8F0D265A
SHA-512:	576B0AEF02B7FB99E613BEDD5893DD4E696AB6D14FABDB658EB9F31DAF92C8034FB04805934023D6A34AE73EEDEDF21FE8D6C628574AF3AF77D492205304BCD8
Malicious:	false
Reputation:	low
URL:	https://an.yandex.ru/system/context.js
Preview:	/! v:937691 b:default c:loaders/context /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o++

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 500x484, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	26174
Entropy (8bit):	7.991943139753356
Encrypted:	true
SSDEEP:	384:CgicJ+SI4MgIbePEwPUxIyN0FNS01I1rqe3CuGlu+GLeLvinao5aWSuq9f:COJ+SI4FIbBFI2ENruexL0ao5Yuqp
MD5:	BD2CDC0F48BD95823BC806EAEB73F87B
SHA1:	EE9A17FA89EC7D37156EF8A37E27F2FDDB18BB02
SHA-256:	89DBFDF2E59A2C9577253552CD13EC7E89BEEAA3CC152F0978A07F23BE480956
SHA-512:	5B722E34E77ABF30201214D619A5FD10F819B32CCEBFC0871B56117F53B96D8CF26FC8659D4552AD1DAF2B0799F39F82046721B369B6068AE219C70D5E073B77
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/5117979/picd78826bff11ea66acb1619af26b2e14b/huge
Preview:	RIFF6f..WEBPVP8 f..p........>Q&.E!.......Y..%Zmo...7.K........L..._.../".......D.=..Wg....>.................E...3'......t....'....._Z.L..:k.h..z........y.......7._....L.g....0........?..w..g..R_ ...[.1...=.{....`.o>..K.w._.....W..PO...x....7....X_.\|....:z...}..}..}..}..}..}..}. b.f..>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>...Y>.K..?..lf.2[/[.Y>...Y>.....o..3.X.'..........{.i.@u.*.........1.u".^.,^...+{i....^L...'.X.}u.1.Tp~..v.1.....h.c..b.(.......>E........}g.{.x].822.`....U....O.2~[r;.L.k..g....>.z`..{.&/.sq.o..x.......^L........g...1T...%Te.^.@.86..yb3..0.$.I...~...g.=.r....`n.=._.@E..p..c.I.?.u..xr<..Y...S..6....`.z.o.<4.)..k...8. .t........\.}.\|..\|\.....z.]a./.....{}B..>L.#...?...v.g`F}~....4....b.TD...(..D...Q&7..T,..`..o_.....uG..(/U.Z..+.!n.G418.&...o....3..U.&..a....F.....4P...Q.....>...H....ah~.....d. .-NN+`.?.B.g.w;8..aX..}[..}._.....q.l.n..n

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 166x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4888
Entropy (8bit):	7.9566132273520545
Encrypted:	false
SSDEEP:	96:12XVaG1aoTsXWZ0Hp44fucO4xXIy8wSgYShxdh4tVRIbVE+YzxbZ:12JaoTJuG4xXMgnhxdO5IZ4zxN
MD5:	44E84DB7D43DFF5C6B28770E5E6BF641
SHA1:	5B35B150B9654FBE237B41E863F74DEF02FDEE6F
SHA-256:	EEE457F6F98091256BE287E09E27DBDE772880EF169790DC1E446A69E5E615FA
SHA-512:	356DD0127FB4967B0F0ADB94FD59D7AD117EAFE96336B51C2E7F8DE6B3C150B789AB944DCB83D7B7E13A190A8DE22F3B00C54A78AECAF8268BFB370F30F64EEC
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/7731570/2a0000018442f63b164e0c1f14366fe3af77/big
Preview:	RIFF....WEBPVP8 .....L.......>Q$.E...."....X...h^.4..P...n......l<......OV.`.(..<..........y.....7[O./.'...O.....w........t....?M.......o.y...@.!....{.X.!./...?.........3~.{.~.......G.....?.._.7./.....\|..9...G.G...O..Jd..}9'o .E.....x.(......k2....c.......Rm:.bZ:.p.../...SU-.r...k.u.....7.z...@......B.@W...j..p.P.g.k.k..xeM.=....>..!....z.vl..".We'...!P#..F..Do.......e.......!..U.W.6Z.s#.l?qx.....#...H.X].....#.$r..!#;D.`F\1.~.t..aj..2s....c.\|....v...u. .O......c{1l\.~..)...<..... .GZ.y.....4.i.P.Fn ._`....t7..\;."he.H.W5)[Y.m.\|.As....].X ._...Q..>R....>\|...8...m.(...I..p..{........E..w."..]..B..\|".F.......].\|.V..'.k.h.9.......e.....1.v.1w.O..1.r#.<.....;LY....g...0&!...".mw.FN.P'.\.x;N......d.9.$.F......].Y.\.Ov...Y.`.}.E..#.E..Q.'.5.C..._.p.r....&...p...g.....!....f.gT...!..$Z?..m%...l.U......[.9....5.+....=)..}F.^....<.......h....1.....Y.f....Su0F1zR....>..S.V.....%F.1]c.8...Pk..%..j..t-.....nK.....~k9[......9..R.M....>....../

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/advert.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	959
Entropy (8bit):	7.745401360078138
Encrypted:	false
SSDEEP:	24:yvxjKkQ/YgkA3N80G0SGc2soUYR2E0DkRropfyHnOBelv:Exjb4kqNZc2rUYBMQOB8v
MD5:	7B2C85ABB95EDE0329B9FB472BF6BB72
SHA1:	F7977739F08FBF240687531D2D1BA7DB0025155C
SHA-256:	1BADC66DA59E2B6FAC0ADA9C0B6B7CF3355864438A58B5E8610E6A72224218B6
SHA-512:	19CF1DB99399C0DF0B6E92954A0E542E744371BC9FB264B36B6B5B03706700B66F578C554D34CB1D00C1A4254D68F7651857AC96310401B512BA992D20F5B6EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.....`.F_...K.HH.".:A.@GI...A.-..,.,6..h.....iJ..?....x.^../p]..w....N.8.\..q.[......cr{..a.7f.&.m..\@..y.$..<3..<..LY...J...D.(.X.....4M8J).e../.....,..a.6.. .2. .b..{.4%.C.}.Q.i".s...w]..W..z......f ..j/.b.'...&.D.].l..I.(....~W...u....p. ..).[...u..<...;.0.g.t]..}.\.u(.2...}.s.8.4M.%I.4M.Y..o....L.E...l..i`]W....,..q ...\|.7.QU..$.M..,K....("M\|+.4.I......eY..yPU..+..5....X.p.'.W..5l..u]....!.......2.@.... ..E.$)(...D.T(.D..............ADI..""%.....SwCdkgv..?...B$..F..;..T..j.~...r....Q:.....1H.T.L&#..wQ..c..g.l6+.h....rLn ..\|b".N..n.KU\..].L&e0..b......~._......!.j(...je.......r.3.J........<...~...>.u8...z..\|..E.S...G..y..l6.Z.&N....@b..(}.Z.e_..Q...R).w..R,......r.=..{....M&..D"..tb.p8(.Pl7.T.....^..(.(......n...5..*6.O..%.y.F.AK9.......l.x<&..j......0V#\|..Z.....m9.N...........g.....X.m.XL.....C.........A.......h ..V....+..h.\|..0.Q..:. .....]........IEND.B`.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65525), with no line terminators
Category:	downloaded
Size (bytes):	178440
Entropy (8bit):	4.9782108617591785
Encrypted:	false
SSDEEP:	1536:6skVAK7WPrStMBxB4mFfNo7WPrItMBxM7u7WPrctMBxpx4rDg39jgp0asA114XaC:iAi9cyA1n6f
MD5:	4F9C26A1938B6345EFABAE9AED67880F
SHA1:	8BBA8B3D625610D8E422B081D62316CDA5927DC7
SHA-256:	7B59800B3E215A4A568FC7D1DAE6B37711B6A5D422820C210FDB5DE1EDC578B6
SHA-512:	A9E069F3CB1DADF3F0F6FE9D3E7AC307102F037095D18664688A4F108A5A3213A9EAD860B30C8A9C97866943E90C5BFF977F67149ACE91885603BC748C7ABB28
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/css/style.min.css
Preview:	.html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,embed,figure,figcaption,footer,header,hgroup,menu,nav,output,ruby,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;outline:0;font-size:100%;font:inherit;vertical-align:baseline;font-family:inherit;font-size:100%;font-style:inherit;font-weight:inherit}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}html{font-size:62.5%;overflow-y:scroll;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%},:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}article,aside,details,figcaption,figure,footer,header,main,nav,section{display:block}table{border-collapse:collapse;border-spacing:0}capt

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 267x150, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9820
Entropy (8bit):	7.982270592154369
Encrypted:	false
SSDEEP:	192:/UwoUK9Z/r7vy5DfCTwEVlebSwnJFnfe7EM5usxWniT9r0eCrBbO20W8A61:/UxpZ/nvyVCFeewnDnBoWn/e+Bq20Lp
MD5:	9E1775CE21ED8C7BD42CBB0FB040D6CC
SHA1:	8F76190A84482ECFE28E9524144D21F2CAA87C96
SHA-256:	5737619696697C724EC822F0EC1FFCB6850EEE02F73D0315B8EDC1DEA850125A
SHA-512:	CF963BEE523EDFF7A9BC0284A0445A620BECA7B319B6A56F968B80D65D54108831C9FDDF73BF9598071138A82AB144C53A8D3F23F73A25CDAA225E8C658DE28A
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-direct/1783913/f9RmxpXOY7GrxYUwn9SCHA/wy150
Preview:	RIFFT&..WEBPVP8 H&...........>Q .E#.....\|8....ax.U........6..5\|?.....................^..R.........k.S.......+.........tB..f.wW._...?..C....P.h.....~...w..Q.p...;..w.y..G..`/..+_.O............k./4.Y{..B......./.].)...d....S.UG...J....#..4.)~&w..V......W..A...e-y9.'.,.F..M......OC......L/...Z..4M.[........'.-.. .Z.....bM0../v...X(.'......]................./...\|...8.K...Y4/.G.1..yB."R...c.SY ........>......k....~B..).j...P..pK..C....9\|..]..Ow_fe.".JX...]LR.eM)...V~....=3$#.H....:.A.......L.?..,....l.....Q.3.O.}(..8.......#y#..O_.C.v... $..k...z.....c.G.UT.....[F.N...E....g....N.B..}]...ly.th..<!..W.:$.X.....u....n.........XgD.s0X&.?.1H."g.....\|.T_..........Li..(.........{.A...6._..S........[...Ut..+E.....%......J.6......R.......g..oM.'.H......-q.6......#8.+{rQ.....O.#.g..........3......7..a.-....5..v./"y.F k....k.U.ih........b....1.\0....Y5..q"..'[6y........B.E> t-..m.1...3......I..?,.....b.V%...7S.+...R.....\|..-...wG.3..:A......2;mh.^..PJ0

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x133, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11316
Entropy (8bit):	7.984095457111221
Encrypted:	false
SSDEEP:	192:2E91hcJJBW/n9nMNHPLf+LX6BeYpzfqyp/jzOvkEnJKvtfgBNkTOShcl2/5T7Bwx:247aJYvWL2LX6wYpzfqyp/n8fnJmY4Sp
MD5:	EC71C4B58A5123083FA30160E266AF11
SHA1:	95D2B56396E40456B537497481FD411551F52D35
SHA-256:	7C4ED98C88C334FBB29C30CAFA8FAE3E2A0407AE55796AADE7C4197663A91168
SHA-512:	8F54CCCBFD023C44551ED6316D1C052EAC2F560DB0F06C45FF4D6D0BE47B2CC6F83E2FA542098C6AB679608DE88752C4B53CCA1DF6500AC96BB87D6AF8A06566
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/7349915/picf4e592cdee91c5b36a717d02b21ce7a6/big
Preview:	RIFF,,..WEBPVP8 ,...........>E..D!..^...,.p..Xb....z.8.-3.u.a.i.S.8.......o.>.o3_...^.?.......z....4.O.>b.......7.?..........O.............c.#...._.?.^.^....;.._...~.............zg.{.....j.....w...k...7.....?.....?./...?....s.....+...w.....v..R...U....B.L.w;..L..W.\|._..\|...........n...KZ.........iY?b.-o.7'......k.P.$Z... ......P.y....=QJ.?.....2.d.....zN.3lP.F...+./.:So.......9.._....l..3..%m....j.W..6.....TU.=...o.h..%d.c.N`...0...h;.iAZ.(...9.y_.T.$.y......F2.Q.@x..n?..w<........:C.%..R...K...S..JY.B1Wm.>....s{./0`r....r.@..<wH....}.o..wZ..+Ukl.=.CNCx.1..M..Q..+..^.>.........I^<..\cJ...L...!a....Z.F./R..m..P...=...n. ...9.z4&.%..F.fc.P......".....K6....`Q.ry.39.......V.7.[P8.TT.?.. n}... C\..n...6).7.J.@.F.'.<-(.i.....W9..%.n....d...S ....+Nu'..G.g..>.8..\|4......T.g.w.2h.i\|d. \&.....@..0+....].....KB....BHj.]....A..R[.xw./......d...........>..........)....M..f`Gk..U,hWX.Y.7.gk_..-.....>....}.Gmv.8..!.,.....K...R......!>.\a....M.+.v

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://sync.bumlam.com/?src=yandex
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1131x800, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	71740
Entropy (8bit):	7.997387467142702
Encrypted:	true
SSDEEP:	1536:wvkqswSTIiwgRPFTYvF5zX/KhzUMrmUgmadNgE1hkYQrOS:wvkbJjsPTKhzUMrmj3AYQrOS
MD5:	307D26464F5BDEFA5CAD3210AD38D77A
SHA1:	3C1D182A16C2A34CEC8ED60A006378376C97665D
SHA-256:	258F5578145AD4E371ABF1B02E0C2274D50005869C713DBF41C4EA5749EA3590
SHA-512:	5BDA23AC2731C35E2E159960A09F7A57F8E13320B20E038A60F31B483CB2DD6E45377DAE5C545D211483AC5B66AF8864501A495AE8CC1E0D64BF40DE29CED467
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-canvas/5414461/2a0000018ad201d642545894fbb44d3bf70b/cropSource
Preview:	RIFF4...WEBPVP8 (...P:...k. .>Q$.F!.Za[..A--..Gz'..).N^.../..U./.9.....?......y..../........_..d.... ^..%..~..{..qg%H.=..zU...D".B..%.R.y....i./S....=V.k...c.C..Mz......=$.....=......_..........=........=................P.....e........G.....!.....3.?...............N...W._...>s.....u.../........R...............?...~.zz.............o./..h.q...W..b~.=..........K7_.o;.._..[%...=..{o..0..dq.u0.w.)...3.7Z..I]....q.........^~2?....6(t\|.`wqK..k.rh.J....a....z...!.x .%.\|.S6.qd.[.p.!..7.K.:...rD.5..8...:(...l...m....+.2D.`..vy..l....a`...@...`8y.]:B}.E\JK.......V..H..8.s1\|...m.Fd.%y'.>.nD.U..O..g'.c.#.P.I0f0..+NGGmG~.S<.vi.........z..44.`.z.a.X..".l..O..]..".(_.Z._aDj.i..UwF,...%Hu4..p.Y..e...........R.h.....rx.M.[\|X..""..C... u......!:..^.f.>.....o.K.1...q....i\|T......x....Q....g_...)..L.d5.s.....e[Up#...//..e.e.R._....-..P.42.o....O....n......"\|1.g:...ur.V%'h....g..(...[.M..H...;....5y..+....6...."$ W......>t`.u.T......:r_&.`..2.......

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11117), with no line terminators
Category:	downloaded
Size (bytes):	11117
Entropy (8bit):	5.175188383669927
Encrypted:	false
SSDEEP:	192:VYhOrRcyqD7ViNW3ZsDVbf7g8x3imWAel/L0Fx18b2VautV2fuUCfPNIx:VYhOrSyIiNWqDVbf7gEibLexa2VautVs
MD5:	A53A916ADF48EFEFD5A2AA0861EBBC07
SHA1:	46ACFA0BE9DD623A7AA9BCEB1344C152A8ADC13B
SHA-256:	9C1989ECD392A0C54FB799409154242706940A8E6D800542BA579DFDA576BB9D
SHA-512:	EB1AA1A9DA37B23DFD5B40A6054BFE3868231B2F1C977BC7C2EEF2AC6DA3F964E8D6B3BAA3ED07BF8C4C141F11078ACCF27175012CDE826F0D69DA4A4D62CFDB
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/plugins/contact-form-7/includes/swv/js/index.js
Preview:	!function(){"use strict";var t={d:function(e,n){for(var i in n)t.o(n,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:n[i]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function n(t){if(this.formData={},this.tree={},!(t instanceof FormData))return this;this.formData=t;const e=()=>{const t=new Map;return t.largestIndex=0,t.set=function(e,n){""===e?e=t.largestIndex++:/^[0-9]+$/.test(e)&&(e=parseInt(e),t.largestIndex<=e&&(t.largestIndex=e+1)),Map.prototype.set.call(t,e,n)},t};this.tree=e();const n=/^(?<name>[a-z][-a-z0-9_:])(?<array>(?:\[(?:[a-z][-a-z0-9_:]\|[0-9])\]))/i;for(const[t,i]of this.formData){const s=t.match(n);if(s)if(""===s.groups.array)this.tree.set(s.groups.name,i);else{const t=[...s.groups.array.matchAll(/\[([a-z][-a-z0-9_:]\|[0-9])\]/gi)].map((([t,e])=>e));t.u

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.553903914934559
Encrypted:	false
SSDEEP:	3:Hd1LAK5zk2CyTgtTAIEk+:0K5zk2CyTgmd
MD5:	F34C811EAA259210371911C90754712A
SHA1:	BEDE7C030E42C72BE7047102D7C72FB9FBFCCDA1
SHA-256:	9D5CA542F73AE9FD0ED404F060A3A45C57FEEFF6B174887E48E24B83275AEA1A
SHA-512:	F31C384104E739294CC26C50015E6A5F14CA841C8C770CC12FA2936337C0C6F34E82EB8C0A12656E111807D63B1AFC4C6F6EA4AA6DE13EE7DAE196EA05F717D7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkmkTishDHu-BIFDRM0Cs4SLAnqeoeMbuZZ7RIFDTE9lDASBQ2jG53KEgUNeG8SGRIFDQ5LEYESBQ2BejQQ?alt=proto
Preview:	CgkKBw0TNArOGgAKLQoHDTE9lDAaAAoHDaMbncoaAAoHDXhvEhkaAAoHDQ5LEYEaAAoHDYF6NBAaAA==

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14087), with no line terminators
Category:	downloaded
Size (bytes):	14087
Entropy (8bit):	5.177580681299744
Encrypted:	false
SSDEEP:	192:vwf7yntTLIZyXqzzDeIzG/1SRAwtgdPJDQUOnYXkwStwMb9oFZEvX2g:vC7ytTkZy6kSRYUwi5b9cg
MD5:	45390A4ACE8F255999FFD0BC7C063C7D
SHA1:	1B990A7D47F4C16379F55E5C8E9B8D4FAB244F14
SHA-256:	7C345EF59FB2B287237939E1CC8CC92028711602334DB6D338990A01676F8E45
SHA-512:	182089A356C3FB2BC576C7D156443EF482EBE819A96168BB5162C897EBB8E02A93193121E191F6EFC71EEE0788CB53881ADFD6A7810477E1AF2B722FFC3E0BC0
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js
Preview:	!function o(i,r,l){function a(t,e){if(!r[t]){if(!i[t]){var n="function"==typeof require&&require;if(!e&&n)return n(t,!0);if(s)return s(t,!0);throw(n=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",n}n=r[t]={exports:{}},i[t][0].call(n.exports,function(e){return a(i[t][1][e]\|\|e)},n,n.exports,o,i,r,l)}return r[t].exports}for(var s="function"==typeof require&&require,e=0;e<l.length;e++)a(l[e]);return a}({1:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.options=void 0;var o=oceanwpLocalize;n.options=o},{}],2:[function(e,t,n){"use strict";var o=e("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(n,"__esModule",{value:!0}),n.fadeOutNav=n.fadeInNav=n.isSelectorValid=n.isElement=n.getSiblings=n.visible=n.offset=n.fadeToggle=n.fadeOut=n.fadeIn=n.slideToggle=n.slideUp=n.slideDown=n.wrap=void 0;var i=o(e("@babel/runtime/helpers/typeof"));n.wrap=function(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:document.cr

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	357
Entropy (8bit):	4.6511739379386094
Encrypted:	false
SSDEEP:	6:YGKeqgXNH0EyMJmTEkK8gQXNHpTEkKjASkgn8GpXNQcEDapb/kbCvO5EkHVHdy1Z:YGKeqsfTnkK8PJYkKjASkELpXNOaZx1Z
MD5:	6F3D2D1711F8D3734D8E8AFBF5AF3120
SHA1:	B775AF370B7D715195EE2FFB90CC3B7CFD18CCC0
SHA-256:	0865A7F642044A47A4B34E83EB30A61D7182493772C680DA9C210A72AF425D96
SHA-512:	732904F970D1B9800F99504F8343B91D3E5BC00A3C06DA751034B7F8BF7FA1DFAD1D978E66FED1C623F22CFC78E2FE9B13FD2EAA0D7A0B846E764D32686D12CE
Malicious:	false
Reputation:	low
URL:	https://yandex.ru/set/s/rsya-tag-users/data?referrer=https%3A%2F%2Ffaq-kak.ru%2F
Preview:	{"counters":[{"id":1014923426,"label":"ZLOgCM6elGEQooH64wM","type":"adwords"},{"id":1014923426,"label":"uXlUCLqxpmMQooH64wM","type":"adwords"}],"customDimensions":{"b":"","browser":"chrome","extensions":"","fresh":"0","fromCancel":"false","fromGoogle":"false","infected":"","loyal":"0","old":"actual","os":"windows","p":"","sbscrb":"","slow":"","winxp":""}}

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1768
Entropy (8bit):	7.8785764420470805
Encrypted:	false
SSDEEP:	48:dIQUs7BrPKaYGcScq25hL1ytM2RGo+4dvKyBt:dIQUsAVGcSV25hL10M2t+yvKyBt
MD5:	2403763BC6BA33325AE143B938B160A3
SHA1:	043420B1F35DA76F988C5AF250D71D5DF429DD70
SHA-256:	EF5C7576D65AB4DEE78CA8AC8269382616F40496CFEA985036938C4D49636BF8
SHA-512:	4CD60CA8FE6741305A373FF7FC0E8262DFAA983447FD99379739AAE6904838AEC388DE91BFC31DC4B66A3E19029287E2A930F6B913324CA5D677F8F3F45C316E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx....d....U.1.m.Nf6...8.i.L..b.m.....}.....7~..Su.U........a.......u$~...d.Gv.y...Fot...7yx.p..wx.....D.;.......w...u.yq.J..7Y...r..{?..D.:wm........).....-......]......!.M.g..........7.<..A"...-.@T_3. .5...3..C...a.R2..ggQ...jDd7.#d..\.l'....9... ..,`.......aAJ.~..g.].B. .v.LB_.@..p.QG&.K..).Qj..........Y.2';...v....1.+........p...]@.-.....2d...x...+.....F\|n1..bC.....8'....`D.....ih.0.q......HP...T....^.I..t.J."Xo.>.u.)7.p..7......Jp...l+..f...e\....I....,w.v.y9....#.:..U<.W%.qahiU}C.S.....9.z..o....z..s%....k....R./.j....O..)...c.....w.....62....&.]..R..5.%.d..........R..Wo..m.<.....S7...d...n#~...:......eUy..b.K.2..a/..r..;k.o.Y...w....^......K......#_y.S..CP..p.. .p.@..u/.V.:..Wz(......k.k...c.{.h..l.>w(.....'.\...MO..N.@..=....X..-..C....CZ....L....F.V..m.~w..3.s....l!...]Y..k`.XDqs...../N.......`..tw..i.TYBs.G;.({....'n9....F..K..9...q.@Tw..3.?..._IE...mnIU...SGn....'.&v.....>.@...z..9&....

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/advert.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x198, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5640
Entropy (8bit):	7.964283936034255
Encrypted:	false
SSDEEP:	96:DAEYdTpBd5qJUv1sXtfRnbTKsOnn8FwJxCXVv9VdnU+V9/dM5IlSAalm5FEN5tr1:DZQTpBi+18t5bNOnO9Ve+V9/dXcAL5Fy
MD5:	42F2DA77DAC27F304C44B59997659322
SHA1:	24E8171E1A50DC9AD8E60845178D438C5CBF8D5C
SHA-256:	6C892BE71499A5FB199777B9BED921267B6001A224378A492531392523A48A7D
SHA-512:	573039D67992DDD00A3F0DA259D0C7A56221FE9F5CE4A543FD11E10228CAC10C7C8E2D20B1303FF6D1B48DB0A1E24233EAD7BB8ECA4096DB5943D5314709D4E6
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/10426767/2a00000188a2f2f3429a0ae4264045d573d6/big
Preview:	RIFF....WEBPVP8 ....pZ.......>Q$.D....r....Y.....C.....Y@i..?@.n.b...8..7l...=8.......=.s..u........g..pMc.........._.:..O..o.\|v/......K....a_..g.O...5_.........w.................l...e..-.........a..A].EXU.>..}.y.aW...zC'h."-.q...g..............n..S..9.#z1R...I.6.v.4..$2..h.5Tg..ve.9b.../.tN.]/..y.v. ....H.;`'K.(.~...MQ#8l.,~..VC.QL.2./..]p.Ec:...Nu.f,Y._sxe..n[..`I....G.0....:..<&.....Y'...X..?<....#....BU...5\..C_......C..%XG.D..6...N....4...!.v.....En...IW..E.....F4s....H...%...8%..]5./....Q...Q.Z#.);.Y.......3.+..,!tks...1,.....M...x.Wc...w.....sx.=lR........Jp.h.^.3..._-...\|Z....u..D.....1;.\|K..O..F.z....H:r.)....4...0...~?.x.].0..t......s.:.W...(.....5_.M.C..O...>v......`..zT..6.y.a...........K-w..;......2..Q[.?.fs.g....K.:./........=2...p............r..!.<......Ik..60...C.....j..vx;...`).......41..TEn*..}...eJ^v-...x....6+...m$...............i?....T.{.\$}'.oq.S.c.R,.H5.x.~NX.-.......\|.L..!=}r.Jv.^c..?.......G.q=.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1768
Entropy (8bit):	7.8785764420470805
Encrypted:	false
SSDEEP:	48:dIQUs7BrPKaYGcScq25hL1ytM2RGo+4dvKyBt:dIQUsAVGcSV25hL10M2t+yvKyBt
MD5:	2403763BC6BA33325AE143B938B160A3
SHA1:	043420B1F35DA76F988C5AF250D71D5DF429DD70
SHA-256:	EF5C7576D65AB4DEE78CA8AC8269382616F40496CFEA985036938C4D49636BF8
SHA-512:	4CD60CA8FE6741305A373FF7FC0E8262DFAA983447FD99379739AAE6904838AEC388DE91BFC31DC4B66A3E19029287E2A930F6B913324CA5D677F8F3F45C316E
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/xn----7sbzoqcfi.xn--p1ai?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz.....IDATx....d....U.1.m.Nf6...8.i.L..b.m.....}.....7~..Su.U........a.......u$~...d.Gv.y...Fot...7yx.p..wx.....D.;.......w...u.yq.J..7Y...r..{?..D.:wm........).....-......]......!.M.g..........7.<..A"...-.@T_3. .5...3..C...a.R2..ggQ...jDd7.#d..\.l'....9... ..,`.......aAJ.~..g.].B. .v.LB_.@..p.QG&.K..).Qj..........Y.2';...v....1.+........p...]@.-.....2d...x...+.....F\|n1..bC.....8'....`D.....ih.0.q......HP...T....^.I..t.J."Xo.>.u.)7.p..7......Jp...l+..f...e\....I....,w.v.y9....#.:..U<.W%.qahiU}C.S.....9.z..o....z..s%....k....R./.j....O..)...c.....w.....62....&.]..R..5.%.d..........R..Wo..m.<.....S7...d...n#~...:......eUy..b.K.2..a/..r..;k.o.Y...w....^......K......#_y.S..CP..p.. .p.@..u/.V.:..Wz(......k.k...c.{.h..l.>w(.....'.\...MO..N.@..=....X..-..C....CZ....L....F.V..m.~w..3.s....l!...]Y..k`.XDqs...../N.......`..tw..i.TYBs.G;.({....'n9....F..K..9...q.@Tw..3.?..._IE...mnIU...SGn....'.&v.....>.@...z..9&....

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-includes/js/jquery/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 447x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19906
Entropy (8bit):	7.989327164154176
Encrypted:	false
SSDEEP:	384:fSeRw2xa13f6xU8l1bVlLJJoGfQJdo0/Oy68euV1OvbGYMtEvgjgmSB:6ghq6ZJaTOX8HVQvboBjgmI
MD5:	6C3CCE789CD3EF6B51293E42300AB07D
SHA1:	3D9C71EC18347B3826196BBD7F0206E37BDEE682
SHA-256:	8983AACF5FD2EC70A759AEDC8CD41735C1AEC5274C2AEC980DB6196EC9D28D72
SHA-512:	55B6A05515DC8E90708BFFC4124885B5EAD1944937AC81037CF92171A0F649882C302B5B070875E06C28B559A9D1C87AF9F93DCBBB21931BA1BE27041F748852
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/9745244/pic73abb14c61340fef3dd851efc0e02f24/huge
Preview:	RIFF.M..WEBPVP8 .M..0Q.......>Q$.F!...N....Z[......._..~.Pe...".m.).@..............$.+.]$...=..sr.@.P......=9.....;.g..E....O.T.;.L.$...A.^.s...?..o.b..9..........o.}.......?k...._...>.}..3.........O...~......O..x-]..q..#..G.q..#..G.q....2....1...B...&6...R"V$.....DJ..?.!H.X..G.d).+.ch..."%bLm..D.I...2....1...B...&6...R"V$.....DJ..?.!H.X..G.d).+.ch...@.{.%Z-v..S-\n..?.!H.X..G.d)..$$H.bi....+.k..`E[......HI.pV....&6...R"V!.A..S.l...h}$...r.i.v.......X.!..."U..L.jpL..N.G..s.)i..-`.%/.\...].7.(mi.......(z..!,l.....3...n8..KD.mJ.`.H.Q.F.....BM.I.u.#.:@>.C.-.<-.........Y.h.dq7.......#.:..O-h..-.QW.....NL..M../.7.M...0.F.Y.:I.Ck.].LD...ef.69;...5...B..:...Xj..$i.${.A...W..e7...3!.b#....f.@...y.fCzu.fo\GIV.b.....I1....i.Q9.n..J`.L...L......S...._}.3...$.[b......iE@/A..G4O".1WY....q\...&I...P...jR..Y...,..V`..Q.K......#Sh\|..'.&/u...`..u.4Nte.hW.&~.!..x;.,........p..#....a....q..i\|.InQ......c..\|.j.V2...n."hG..<..lZ......WNLU.^\|x.`.....pC....cEc.)w.....h

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	921
Entropy (8bit):	7.667602095802721
Encrypted:	false
SSDEEP:	24:xosdOaJeBIf6lgnw7gOx/hmi5PRaumE/IgaN6ABl7nnuI:xoCZJeOf6lgnw7gOx/GY/I96ox
MD5:	BE41633DE757962CD88C44D34D8C76BA
SHA1:	31AEF2CBB616DBA0A28069F3838760E0775AC0F8
SHA-256:	CCBCB8CF4B2D567471E77BD7365BBA41F2FB29C8374B3F532E39AD6B14829065
SHA-512:	F794FE24608EEB80293174B60F96E877062B7EE98CDF47C260485007AA39EAC8A3F34E99EE82DABB4E0E22AFD0E99663D9F86437C59A4DB8C1CBF3194F9DAA67
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/mebelstyle.ru?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz....`IDATx....lmM....m.6..m.m..l../.J2O.....5...l.q..H.,..m....g".....il..z..q.7O.mBC....7\..T..H>..1....w@F.n.....H.....d.........._.f...H .>.o......\|.h.T....>.=M...~....<...._........x..K.Z.U.:.!x.F.P...t...D;R.e..._..>...x......!......m........&......~....(......p.A..g........9..P..P.7....d.Sb?.q,....I.......VR..=.GO.:.......p>.R4...O...#a....M.s9<.>.X....}....-.k...h..?`..0.)P...I...`.)..V......!..G...7..<....}..S.....I.M+>]y...?.^U?..o.......Z...CBj...+qU.C.n..QI.G.F6.$..9..'._.kLb...}..B2u.>.k.G..?..i..B...40.N.t....,..cH.<......v6..;.+....e.V_h].q.\|i..0*#....?...\..3.K.?....o....r..h.K'.d........&#......=......Y."k....).a.f...Z..................n.Gp......z..qi.w@..n.\|..O.}m=4....U.;C.._.5...Iw.jk}.......~X.....^...0Q...u5..el..z.uj..9..w.i}..Y..p.... ......S_...'......-...@.=....s.....d..%......~,..\f.........m/i..K.....IEND.B`.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392
Category:	downloaded
Size (bytes):	80300
Entropy (8bit):	7.997228177449401
Encrypted:	true
SSDEEP:	1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19
MD5:	8E1ED89B6CCB8CE41FAF5CB672677105
SHA1:	9B592048B9062B00F0B2DD782D70A95B7DC69B83
SHA-256:	6B555920E358F8A25A422988B448615C33BCCCB4F932E8331CEBFC8E2A737FC7
SHA-512:	E2F6B4574CB1541DFF6852D0AF44FAAE80286110E8451841EADE4B53EBDF31150602640FE1BDFFF41459EA4AE884D14D115FBC93B30D199C87B88F5D07E4CD72
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......9...........9R.K.`....................?FFTM....`..N.....`..@.6.$..0..4.. ..+...[2{..2.Q2...L4n.+..;.....E..t..;..J...qe......h.9..u.c..GR....u..C.!...\.Z......8.U.:a.......5/}.:...<;v..3ZE.4..chz....Y,.N#.:..!..~.RQk.b..>L..O..(.!.&.........^.J2D2D2..............n5z..)....%.L.<M...2..Q.K.y.....}...{...v.T...".......N.<..j.......e(..8G..,...\n..\n.\....#.H.i.n...,....F2...5cn5..W.\|.FI.....=.:.]ME...d.....-..........-........`.=...O......w..........UN..!Y.D.p.3..j8G.R...}.yY@.n.d.f....Tt\|.O.%..y...Y..........u.~..N.../.8....#r.6j.......hcXyS)....f.~F.Y......=.Q}C...SPA.....@.T...0.\..M..e.....O[VZic}...m..._Y.....n..{.)..[.4D...~94......'.<...1M."..O.....OK......g"..S.Wk.....PJ.H.........+F.GB..!d.180...{.!...n.....)..OKj.6...7&.k.....,..qu.....n;D...<....H]....3.......v...D.....F.F..... .....G..89$.........jj.A.J?.X......C.?..n...B....~b....)0Dm.k.'.Y....c.7<.K.....\|...F.I?o_.....]aAS/.!." ..E....Tod..........n.\.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11498
Entropy (8bit):	7.976029552201588
Encrypted:	false
SSDEEP:	192:Qp6ZVul9ipgOs9t91lgE0aQY55CAOUErN+Rfq6/3E603x1yauexPJMjc+sz6XVHQ:+6ZVulJOGyE0aQ8CJBQl/E6IxttxBl6q
MD5:	06D1243A8717B6183DF6E6411ED0C758
SHA1:	2911EAB04DB7BC5260416CA8BC12110B2E59B893
SHA-256:	786563C500179577A4D4F22EB499BFFBCE5C8048CC4886563113DC15BBC4F512
SHA-512:	6486B6B425151A5EA624F9A8E8323435DE3588D1ABBDF8308D233EDA30B5B2870EECC7675C75EED50EEE3D83E7E6AD3A6BE160DD3BF6807C40AC2F0A1784DD91
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.....9d6...,.IDATx..[..$...xV......6.m.m...m..f.F..R.o.'..e.....U.B.._(.....o...r....{...B.p....8.....B"B.........K.BD...J...W.....v'...Hy.Z,...$.V.W.J)~.......m.....r.f29.VTK...q..f;.W......LY.D.D.....x.Q....s..6,f....q..4...j9X;1R9J.#W.V7..Tj......_.......0^....N.=<...$.D...#d..e........e...q,........BR-.N%..'.+.K...q...S.z`t'.}.s.,..t..F.k.\|@;..#"..T`(..-]a!....=v...TE....e.. .2.\.......[....J.......;......?...k.o.._Qk....~f.d..)?(c..J..].5..u.T..z.4..u....].EF..@g]..[.8\-.s...q........n.).-,.7Uz.s_.z.5.N..N......"8...WO....6k.2W...A...'s=.:.sez..DI.....nw.].Q.m.g.._............~..I...$/..l.$.D(.eD\|.%.,3......f.,......6..8k...^...B.f'G..::T..V+F.\|.....I...:..o.lv..w.~..Tr%..t..'d.+Z5@...b....}...5..V,=[...,.Mi..\..Jq.f.}.3?;..+.....v.......t.[.hu.W....,Rt...9........J....R...b.t.2NA.z.....l)..:k.a..;..ji...w..m59r......>.i7]..._....I.+....:r.R.8...d...{.X.8)H.N..d.2G.~......._....F....V..$..~.s

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	979
Entropy (8bit):	7.701021737745739
Encrypted:	false
SSDEEP:	12:6v/7ioscjJ3CDaA6trNq1bmGP098zZGcEzZTf5ZmHTloos2h0cNUBuKgxc6ZVqNS:G4etr0VZ+zZTWSc60vxqP9hLqOTKt
MD5:	F476D638BF8521A7C7F73B6FEABB6E25
SHA1:	9EEE0649F97E09F79ECF352430E51794563F3C23
SHA-256:	6A82285840F81A972D3CD36C92770F8FEB8E555E70D1A4FD78CCB83E1A8BB27D
SHA-512:	A3E1932C8E11B95D871CD90FFBC27D39A2CAE88F8C3CC36C8E9C301B2DC85A4850F2F6A2FB90C1BD311A0690AF2306CFA7798158B1CA68258F6FEF28EE218970
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.bd....:.l........_'3.k.m.6...f....m.=.I...o....N.O.. .iM...B.C..4".we..'..9........J...^7...@...A...w.(.B.X.9..e.~g...m.aTP..f....ou1..i.".."...r;T<._.W..A........_@.:....+.t{....PY0$...m.p...........T..%^h1a..}z...>.&........1...Xj9.....u.cs.c.!4P...,n1.=....U.8^.L..s.............43....[EXo.v.W.+.?..--.jsy.....ls........B;..T@.B`,....e..V`...F+\.4.....~P......>.-...p..E.....8...+9&...f.{.[...b.;#3.....k...fNV^K.r&..]q5a..<...Pn."..2..R..+..}.s...~Se.8.........;&\|...j...^..Z..1.\|.o.ZIE.(1B".g.y.[.T...Gx....q.-m.{o......}c...j{..1.Bb.iAR.......+.nC_y...D.R..r...D.`:.$1.f.....#.\|.f...x.-...&Er.c..^.!.X`aa..<.......}.-.....^...w..F.oX.<.n....Jb......\.R...U^z..~..2......D.x.q;+~.u;...{3.G.N".d.n.....$....f.M.mv(~.<$...r.+...F%$.4P.m[2..x...q..^.....q.D.s.P~?.0...G+.........u.8D....A48...~.T.5Tm..rK.*.~..1..S.q.=..7u.@c.E.:R=.....'..9%m..............]......IEND.B`.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 500x488, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19368
Entropy (8bit):	7.9887327590581325
Encrypted:	false
SSDEEP:	384:txecQ5p9o9e2L+b20ZaHQ5pdavYvNnYhfUwyUoMCaaDCfXJEKXA/zwlvpEPlC7tb:re/a9V+faHQzvFn2FyfMCX+/XQ/IIs
MD5:	E0258A2126DE46FDA81474CB238B2966
SHA1:	C33FC19D3B75DE30D27BB211FBD4E4AB532BE329
SHA-256:	5E45566D0395B1D75C6ED16C02716EBB7C42A72445308A2608B8D25805C1CFAC
SHA-512:	401D740D0D1A2EEC6E853D4D709FD0B15F4018233F8AE266D9817F4F8B8817EDEC41E3702DC8A3BB3668D0DCA71DF9A08F56CE359B958356FAD46D3D68FF5941
Malicious:	false
Reputation:	low
URL:	https://avatars.mds.yandex.net/get-yabs_performance/5122202/2a00000188a2f2dd6c72992bc3482f2ff4f2/huge
Preview:	RIFF.K..WEBPVP8 .K..PQ.......>Q$.E...=:....Z[._.y.\.o.;@>\...8b.....x.;W.@..o.~.t..=....... ......}.~...o....X...y...].. .u..0.B...U.%...t..#..N.........%.....z.?..?....O.gC.{......?..........o............_....T.N.....z.........}....D...g.?..._.=x......^.a.+.. exa....0.x.I.d..$....x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.x.w.9.xH4>.3K.....V...z0...1q.%.8.].E.8.]......ti.%.&B..........s.....m.!t.Rp.uSn...........p.A(../r?..I.O.8...%V...]b...*.............n1EW.}...xS.L...a.c.$_..h....4z.g.....JG.....O.6.!i....'.Kz.....[.......T.....:.G.w...`....1..J..C..a&%.=.+B}U...T....R..W...c.t.0>..n.I4.Q...$.....)0p....."].o..._.kt ..y........0...Dw.r.......;....:DL.T,M:+...U;.....V..bW.N....e.2. ....+..gx..6.N..N+..h.sx.Y....dZ.....8..M.'....uG...[..."...P[.N.s=.-44.0qRhYQ.b...w.WH.....{..........aU:.pi.....-......!2a^"....../.n1'..;D.....q.>;..1.1s.."b.>.3CF.,...{....g0.Y?

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8989), with no line terminators
Category:	downloaded
Size (bytes):	8989
Entropy (8bit):	5.157781928552736
Encrypted:	false
SSDEEP:	192:iPtdryDtWLIZys25zcqKjW5dOM9a6NMYREX:iPtdryhWkZyR9v095
MD5:	679293C5F2184C6A335F0EE58D691AF5
SHA1:	2C93237D0E23D4AC94BE43320B581A50365BD959
SHA-256:	B27375090FA7A6B1B7953505CCCE5FF008DB3C23196579DB5749F71F0F485304
SHA-512:	02455439AD845B00C2586AB46FCFCCFFBD53AB29D4FCF938F03272BA64C598BE62390A4AD5C4E56A057BF6D323D539F32E5332B64E02371F11D0F2947F08928F
Malicious:	false
Reputation:	low
URL:	https://faq-kak.ru/wp-content/themes/oceanwp/assets/js/scroll-top.min.js
Preview:	!function i(n,l,r){function s(t,e){if(!l[t]){if(!n[t]){var o="function"==typeof require&&require;if(!e&&o)return o(t,!0);if(a)return a(t,!0);throw(o=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",o}o=l[t]={exports:{}},n[t][0].call(o.exports,function(e){return s(n[t][1][e]\|\|e)},o,o.exports,i,n,l,r)}return l[t].exports}for(var a="function"==typeof require&&require,e=0;e<r.length;e++)s(r[e]);return s}({1:[function(e,t,o){"use strict";var i=e("@babel/runtime/helpers/interopRequireDefault");Object.defineProperty(o,"__esModule",{value:!0}),o.fadeOutNav=o.fadeInNav=o.isSelectorValid=o.isElement=o.getSiblings=o.visible=o.offset=o.fadeToggle=o.fadeOut=o.fadeIn=o.slideToggle=o.slideUp=o.slideDown=o.wrap=void 0;var n=i(e("@babel/runtime/helpers/typeof"));o.wrap=function(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:document.createElement("div");return e.nextSibling?e.parentNode.insertBefore(t,e.nextSibling):e.parentNode.appendChild(t),t.appendChild(e)};function

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1158
Entropy (8bit):	7.788938368586607
Encrypted:	false
SSDEEP:	24:bWyOohvmwcrifeu2Y1tuAhmlAuToU1aMLkKPQNpK:G3vuTtuUmlFh1JL+E
MD5:	9976770FC5BE1FA5506E978154BAEA3C
SHA1:	81CD6F2258AB489E6F00DB526F2910924994E7F5
SHA-256:	9074A6BB5777E7BCC4956F062AB57260E740BC8B8E8297F6413CD16F504A84B5
SHA-512:	255596D531F86ECC64B5A1545D487270F7B635CA3F28A57F3BA28C9D462237AA46B332FB47630457175FF46BFABF30C98937525435A6999800326AFBCBD4EE98
Malicious:	false
Reputation:	low
URL:	https://favicon.yandex.net/favicon/finexpert.capital?size=32&stub=2
Preview:	.PNG........IHDR... ... .....szz....MIDATx....t$.....>.8.m.6.m.m.m.tX..J..v.5.Q..;u,.dG...-..+.8P8..h.0\.o..B......@..pO..i.65..g+..{;.....C...Z.O...Y..h.[..5...rNa. .$...!.!4..T..-.10...~.}.!.!.".x......_}Em{......'....#.;...,.7.w...s.L.[....^0.............@0.0..c.W0..F.6(........P...../d.Z.,^k3x..\|.L....~..?..e..^6,..Q./..#..............I0k)$$.O..&t.1....8.........x.P....\|.aPs.....-......$..9.9...._...K.w..f...C...\%.]..(..2.+....z.~.o#.~....%.....r..V......g..Q>.4b..8iZ.Kl.t....qS,..wN....._.0d"w...A...............;=D'P....8Q;.A..P_.o0.z...4.m..X..^\|Zx.i!.}...................-.....rl..."...p....E.=..A./.>...6..w.....t...p..f.._.#.......'...m.N....e...W..Y.&..c`.T.'............P.>...V.(....9...l.@..F<f(`.....\|.T\|>....W.......apk.Y..\P..L%9..^.l.o.....d.L[d..f..*...-S.o.h^...."p....m[.......a.V./.....D.$`........F......@..=<..p#.w...e...H..qo....d.....u.#.O...0....g.....$....lqX.7.... ......._....Q...~v.P>-..[.XI.X0.:`.....8.v...xS+e.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1248
Entropy (8bit):	7.500085429482198
Encrypted:	false
SSDEEP:	24:Bw0o0XxDuLHeOWXG4OZ7DAJuLHenX3pwVviGvtZQWnnEvcoll88:BwFuERAol/vtPEv588
MD5:	6BD0E7B14504D7EDF771237A39E1B157
SHA1:	8FC55C7F75B8D89027E06D9097B3FB7179026A0C
SHA-256:	183F05FE2869B9D33F5B5326B64D13443708F33A5515F93BCB89EE1770D529FA
SHA-512:	2CDC58808A20F7E37C7AFAA0A3B8D6844BD0A2D61954D8C71D7103E1B0F36D9FD6E0FD5BBDB0F77FB28FDEB2484699C6B8153DCD2F2DE899E82931336EE942DA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..R...."..y.....Z.Y...<.0.!N7d..W.i~......h..5T.........k..J-.]...3..\?..H..x.D.4.vi^i... .O.....+.\|9..\|#..../.5...f..f.e.Q..g.1..Q.Wr....^.:..IF.........8........O4....Ht.e.....H.........VTb0.1.j. .^Q..j.h..X..[h..6^}...d....s...5.R..m..r]Y..z....W..$ F.h.TM.....5..SE.5..o.kwz.......L.y..'u,.P....W..9..?..y..W=9.O..$.]~_..M.....}..F.yo..........-.....UQ..\|..>

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 1, 2024 00:36:01.830545902 CET	49675	443	192.168.2.4	173.222.162.32
Jan 1, 2024 00:36:02.080518007 CET	49678	443	192.168.2.4	104.46.162.224
Jan 1, 2024 00:36:08.895858049 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:08.895869970 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:08.895925999 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:08.896490097 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:08.896552086 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:08.896615982 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:08.898596048 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:08.898612976 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:08.898868084 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:08.898888111 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.172303915 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.172542095 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.172575951 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.173039913 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.173161030 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.174072981 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.174153090 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.174210072 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.177345037 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:09.177376986 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.178579092 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.178642035 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:09.178786993 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.178890944 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.179440022 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.179447889 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.179755926 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:09.179827929 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.179970026 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:09.179979086 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.220022917 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.235639095 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:09.426518917 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.426666021 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.426712036 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.427046061 CET	49730	443	192.168.2.4	142.251.116.101
Jan 1, 2024 00:36:09.427059889 CET	443	49730	142.251.116.101	192.168.2.4
Jan 1, 2024 00:36:09.443537951 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.443677902 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:09.443733931 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:09.444397926 CET	49731	443	192.168.2.4	142.250.115.84
Jan 1, 2024 00:36:09.444407940 CET	443	49731	142.250.115.84	192.168.2.4
Jan 1, 2024 00:36:10.728037119 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:10.728085995 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:10.728156090 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:10.728677034 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:10.728724003 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:10.728779078 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:10.729074001 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:10.729099035 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:10.729274988 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:10.729289055 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.293221951 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.293584108 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.293598890 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.293971062 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.294135094 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.294157028 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.295020103 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.295114040 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.295134068 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.295173883 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.296216965 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.296271086 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.296441078 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.296494961 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.296583891 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.296590090 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.347830057 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.347831964 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:11.347841024 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:11.395678997 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.231831074 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.231867075 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:13.231993914 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.232415915 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.232429028 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:13.318001986 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.318026066 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.318033934 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.318063021 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.318079948 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.318087101 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.318171024 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.318171024 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.318196058 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.318471909 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.319281101 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.319303989 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.319403887 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.319410086 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.319521904 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.385287046 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.386472940 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.386519909 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.386606932 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.387281895 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.387290001 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.388330936 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.388361931 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.389293909 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.392285109 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.392302990 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.392419100 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.393270969 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.393301964 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.393604994 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.395040035 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.395055056 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.395286083 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.395297050 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.395814896 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.395826101 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.432735920 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.488516092 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:13.489176989 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.489192009 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:13.493978977 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:13.494174004 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.495809078 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.495873928 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:13.509109020 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:13.509143114 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:13.509327888 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:13.513000965 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:13.513026953 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:13.546936989 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.546950102 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:13.588182926 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:13.590555906 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.590575933 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.590595961 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.590692043 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.590692043 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.590718031 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.591619015 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.591923952 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.591943026 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.592055082 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.592055082 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.592061043 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.593342066 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.593365908 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.593437910 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.593437910 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.593446970 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.595731020 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.763664007 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:13.763889074 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:13.769922972 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:13.769941092 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:13.770174980 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:13.814451933 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:13.862766981 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.862778902 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.862819910 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.862864017 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.862879992 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.862910986 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.862993956 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.864337921 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.864356995 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.864485979 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.864490986 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.864763021 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.865727901 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.865746975 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.865885973 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.865890026 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.865993023 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.866914988 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.866934061 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.867029905 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.867033958 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.867146015 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.879219055 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:13.924743891 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:13.929639101 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929661989 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929667950 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929699898 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929721117 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929730892 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929739952 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.929758072 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929774046 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.929784060 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.929794073 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.929929972 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.930954933 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.930975914 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.931061029 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.931061029 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.931066036 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.933840036 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.935211897 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.935235023 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.935551882 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.941709995 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.941770077 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.942009926 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.972285032 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.972695112 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.972717047 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.973001003 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.975498915 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.980230093 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.981602907 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.988734961 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.998830080 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.998838902 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.999605894 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.999627113 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:13.999762058 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:13.999846935 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.000123978 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.000158072 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.000236034 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.001038074 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.001055956 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.001121044 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.001154900 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.001833916 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.001915932 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.001945019 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.002016068 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.002311945 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.002314091 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.002317905 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.002321005 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.002370119 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.005026102 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.005026102 CET	49743	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.005043983 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.005053043 CET	443	49743	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.040744066 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.050983906 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.050983906 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.050985098 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.072565079 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.072593927 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.072665930 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.075630903 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.075650930 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.134797096 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.134808064 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.134865046 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.134884119 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.134922981 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.139453888 CET	49735	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.139467955 CET	443	49735	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.140089989 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.140117884 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.140178919 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.142051935 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.142062902 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.202109098 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.202125072 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.202163935 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.202182055 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.202224016 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.203531027 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.203546047 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.203610897 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.203614950 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.203651905 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.204952002 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.204966068 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.205018997 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.205023050 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.205068111 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.322097063 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.322166920 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.335839033 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.335853100 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.336067915 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.340497971 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.384732008 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.473669052 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.473685980 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.473732948 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.473776102 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.473778963 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.473817110 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.473819017 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.474240065 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.474292040 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.474630117 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.474670887 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.474678040 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.474684954 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.474708080 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.474711895 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.474749088 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.474881887 CET	49739	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.474899054 CET	443	49739	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.475296021 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.475317001 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.475393057 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.475951910 CET	49734	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.475961924 CET	443	49734	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.476365089 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.476377010 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.476432085 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.477035046 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.477051020 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.477505922 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.477519035 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.516215086 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.516237020 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.516251087 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.516274929 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.516280890 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.516316891 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.516983032 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.516997099 CET	443	49740	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.517005920 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.517040014 CET	49740	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.517249107 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.517271996 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.517327070 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.517808914 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.517819881 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554339886 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554363012 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554369926 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554389954 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554397106 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554419041 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.554440975 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554454088 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.554474115 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.554511070 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.555006027 CET	49741	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.555015087 CET	443	49741	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.555389881 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.555412054 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.555459023 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.555883884 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.555902958 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.562674046 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.562817097 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.562860012 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.564062119 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.564074039 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.564089060 CET	49744	443	192.168.2.4	173.223.108.114
Jan 1, 2024 00:36:14.564093113 CET	443	49744	173.223.108.114	192.168.2.4
Jan 1, 2024 00:36:14.689688921 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.689940929 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.689963102 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.690269947 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.691827059 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.691900969 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.692099094 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.732742071 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868128061 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868148088 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868155956 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868172884 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868179083 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868181944 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868210077 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.868235111 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.868253946 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.868295908 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.869396925 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.869414091 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.869447947 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.869461060 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:14.869489908 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:14.911108971 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.029546976 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.030716896 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.051295996 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.051315069 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.051631927 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.055887938 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.055952072 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.056618929 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.056632996 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.057182074 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.057527065 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.057693005 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.058850050 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.058902025 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.059454918 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.059462070 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.065681934 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.066220999 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.066234112 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.067172050 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.067239046 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.069485903 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.069545984 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.070151091 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.070157051 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.101727009 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.102410078 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.102432013 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.103540897 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.103636026 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.104125023 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.104197025 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.104367018 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.104741096 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.112534046 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.112540007 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.140285015 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.140316010 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.140341997 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.140371084 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.140379906 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.140408993 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.140476942 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.141129971 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.141156912 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.141197920 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.141221046 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.143765926 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.145091057 CET	49742	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.145102978 CET	443	49742	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.145768881 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.145807981 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.145900965 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.147533894 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.147546053 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.148732901 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.159562111 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.159574032 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.207545042 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.573839903 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.573864937 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.573905945 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.573934078 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.574096918 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.575978041 CET	49746	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.575988054 CET	443	49746	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.576678038 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.576713085 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.576781034 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.577713966 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.577742100 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652407885 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652431011 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652456045 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652483940 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652514935 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652523041 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652555943 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.652555943 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.652645111 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.652861118 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.652949095 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.654864073 CET	49748	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.654875040 CET	443	49748	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.654903889 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.655390978 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.655427933 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.655791044 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.660093069 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.660106897 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.662667990 CET	49749	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.662683010 CET	443	49749	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.663377047 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.663402081 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.663623095 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.664378881 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.664391041 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.693949938 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.694253922 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.694267988 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.694710970 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.695559025 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.695617914 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:15.696099997 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:15.736751080 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.124067068 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.124325991 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.124355078 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.124660969 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.125061989 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.125121117 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.125195026 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.172736883 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.208195925 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.208420038 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.208440065 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.208731890 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.209141016 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.209212065 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.209371090 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.211487055 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.211673975 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.211688995 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.213165045 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.213221073 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.213727951 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.213794947 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.213843107 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.213848114 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.233874083 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.233936071 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.233975887 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.234855890 CET	49750	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.234872103 CET	443	49750	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.235374928 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.235408068 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.235466003 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.235985041 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.235997915 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.252738953 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.260051012 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.283741951 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.283762932 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.283778906 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.283807039 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.283821106 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.283845901 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.283868074 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.285104036 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.285119057 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.285171986 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.285186052 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.339056969 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.557547092 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.557554960 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.557589054 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.557631016 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.557655096 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.557676077 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.557689905 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.559772968 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.559792042 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.559818029 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.559822083 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.559849024 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.559864998 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.560626984 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.560645103 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.560724974 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.560730934 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.560767889 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.617005110 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.617027998 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.617034912 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.617064953 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.617084026 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.617088079 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.617099047 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.617117882 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.617130995 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.617167950 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.618271112 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.618295908 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.618324995 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.618330956 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.618345976 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.659367085 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.711165905 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.711196899 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.711240053 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.711257935 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.711262941 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.711306095 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.750272036 CET	49751	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.750293016 CET	443	49751	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.750380993 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.750411987 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.750459909 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.750472069 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.750509977 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.750550985 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.751960039 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.751981974 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.752039909 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.755127907 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.755136967 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.759820938 CET	49753	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.759834051 CET	443	49753	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.760492086 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.760516882 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.760571003 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.762454987 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.762468100 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.783370972 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.789347887 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.789370060 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.789736986 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.790395021 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.790460110 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.790661097 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.796426058 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.796442986 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.796477079 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.796497107 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.796504974 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.796551943 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.796575069 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.802450895 CET	49752	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.802465916 CET	443	49752	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.803154945 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.803174019 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.803220987 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.805130959 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.805140972 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.828668118 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.828680038 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.828704119 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.828747988 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.828775883 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.828784943 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.828813076 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.830034018 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.830050945 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.830096006 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.830101013 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.830136061 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.830163002 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.831557989 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.831571102 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.831629992 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.831634998 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.831672907 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.832813025 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.832828045 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.832880020 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.832884073 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.832921028 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.834247112 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.834259987 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.834315062 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.834319115 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.834348917 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.835521936 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.835553885 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.835572958 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.835580111 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.835608006 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.835618973 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.835655928 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.836746931 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.887921095 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.887929916 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.887967110 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.887980938 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.888003111 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.888020039 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.888045073 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.888062000 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.889379025 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.889394045 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.889448881 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.889455080 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.889511108 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.890749931 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.890764952 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.890834093 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.890844107 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.890886068 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.950639009 CET	49745	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.950661898 CET	443	49745	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.951210022 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.951247931 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:16.951299906 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.952536106 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:16.952548981 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.157310009 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.157357931 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.157392025 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.157444954 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.157782078 CET	49747	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.157793045 CET	443	49747	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.158612013 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.158649921 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.158721924 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.159569979 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.159581900 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.301022053 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.302643061 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.302655935 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.302938938 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.303348064 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.303404093 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.303493023 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.307549953 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.307801962 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.307811975 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.308856010 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.308918953 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.309360981 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.309425116 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.309623003 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.348738909 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.352741003 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.353669882 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.359780073 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.359786987 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.367229939 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.367242098 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.367548943 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.369360924 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.369415045 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.369477987 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.408763885 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.408770084 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.409619093 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.499533892 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.499809980 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.499831915 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.500873089 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.500929117 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.501502991 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.501559973 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.501974106 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.548746109 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.556545973 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.556559086 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.595597029 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.595618963 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.595649958 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.595714092 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.595731974 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.595747948 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.595786095 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.596034050 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.596091986 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.596103907 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.596112967 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.596152067 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.598613977 CET	49754	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.598623991 CET	443	49754	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.599060059 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.599071980 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.599147081 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.599975109 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.599987984 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.603282928 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.707012892 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.707222939 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.707237005 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.708108902 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.708165884 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.708503008 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.708559036 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.708632946 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.751759052 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.751769066 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.805823088 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.882827997 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.882852077 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.882858038 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.882889032 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.882915974 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.882934093 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.882972002 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.884536982 CET	49756	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.884546995 CET	443	49756	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.884989023 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.885010958 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.885122061 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.885845900 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.885859013 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.887351036 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.887376070 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.887415886 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.887433052 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.887449980 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.887449980 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.887473106 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.888617992 CET	49755	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.888626099 CET	443	49755	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.888998032 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.889025927 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:17.889297009 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.889967918 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:17.889981985 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.146961927 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.147231102 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.147250891 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.147649050 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.147969961 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.148036957 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.148109913 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.188735962 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.192214966 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.192886114 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.192909002 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.192915916 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.192929029 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.192951918 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.192969084 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.192986965 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.193002939 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.193047047 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.193141937 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.193200111 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.193202019 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.193248987 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.194750071 CET	49757	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.194757938 CET	443	49757	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.195374012 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.195405960 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.195492029 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.196688890 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.196698904 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310805082 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310827971 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310834885 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310852051 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310863018 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310870886 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310894966 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.310919046 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310934067 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.310940027 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.310956001 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.311984062 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.312005043 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.312011003 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.312036037 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.312041044 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.312078953 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.312082052 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.312195063 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.312411070 CET	49758	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.312422037 CET	443	49758	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.312736034 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.312748909 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.312813044 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.313607931 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.313612938 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.435918093 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.436269045 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.436285973 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.436634064 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.437031031 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.437094927 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.437946081 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.439409018 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.446989059 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.447014093 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.447339058 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.448002100 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.448057890 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.448237896 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.480740070 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.492739916 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.519975901 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.519995928 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.520003080 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.520026922 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.520039082 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.520045042 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.520065069 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.520081997 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.520092010 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.520122051 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.520122051 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.521325111 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.521339893 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.521356106 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.521414042 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.521440029 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.687182903 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.687207937 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.687263966 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.687263966 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.687314034 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.689096928 CET	49760	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.689111948 CET	443	49760	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.689518929 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.689558029 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.689634085 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.690449953 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.690460920 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.746903896 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.747150898 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.747169971 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.747636080 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.747982979 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.748095989 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.748173952 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.788748980 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.791543961 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.791577101 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.791764021 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.791774988 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.791837931 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.792968988 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.792989969 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.793085098 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.793093920 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.793142080 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.794131041 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.794183016 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.794209957 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.794210911 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.794291019 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.794960022 CET	49759	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.794975996 CET	443	49759	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.795619011 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.795646906 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.795707941 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.797765970 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.797780991 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.868041992 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.868267059 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.868295908 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.869337082 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.869396925 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.869729042 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.869791031 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.869934082 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:18.869940996 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:18.911216974 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.018013954 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.018034935 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.018081903 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.018105984 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.018124104 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.018172026 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.018774986 CET	49762	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.018785954 CET	443	49762	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.019318104 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.019351006 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.019406080 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.020447016 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.020459890 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.240920067 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.241262913 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.241282940 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.241698980 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.242508888 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.242569923 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.242793083 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.251653910 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.251676083 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.251691103 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.251760960 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.251760960 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.251785040 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.251853943 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.253110886 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.253129005 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.253194094 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.253194094 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.253201008 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.284733057 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.298460007 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.336158991 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.336203098 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.336241007 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.336280107 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.336286068 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.336308956 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.336349964 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.336970091 CET	49763	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.336990118 CET	443	49763	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.343844891 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.344130993 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.344149113 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.344636917 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.345242023 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.345242023 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.345254898 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.345329046 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.390919924 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.412050009 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.412082911 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.412091017 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.412111998 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.412188053 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.412223101 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.412348032 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.415483952 CET	49764	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.415496111 CET	443	49764	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.524132967 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.524147034 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.524190903 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.524230957 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.524249077 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.524274111 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.524561882 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.524766922 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.524831057 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.524852037 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.527643919 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.529963970 CET	49761	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.529979944 CET	443	49761	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.570389032 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.570688963 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.570708036 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.571018934 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.571928978 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.571985006 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.572088003 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.616728067 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.784931898 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.784962893 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.785023928 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.785058975 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.788012028 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.951690912 CET	49765	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.951710939 CET	443	49765	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.955954075 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.955987930 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:19.956144094 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.956533909 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:19.956547976 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.077327967 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:20.077352047 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:20.077583075 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:20.077866077 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:20.077877998 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:20.113130093 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.113193989 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.113240004 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.120277882 CET	49767	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.120286942 CET	443	49767	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.123733044 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.123765945 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.123835087 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.124385118 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.124418974 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.124495983 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.125828981 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.125843048 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.126358032 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.126370907 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151384115 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151418924 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151428938 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151442051 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151470900 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151609898 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.151609898 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.151622057 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151680946 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.151902914 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151976109 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.151982069 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.151992083 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.152038097 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.171443939 CET	49766	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.171452999 CET	443	49766	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.248557091 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:20.248584986 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:20.248640060 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:20.249725103 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:20.249737978 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:20.305763006 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:20.305788040 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:20.305854082 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:20.307215929 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:20.307228088 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:20.506434917 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.556185961 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.637512922 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:20.683510065 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.684463024 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:20.685190916 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:20.732183933 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.732183933 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:20.822957993 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:20.876255989 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:20.907080889 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:20.956186056 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:21.815630913 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:21.815661907 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:21.815804958 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:21.815834045 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:21.816082001 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.816118956 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.816210032 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.816237926 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.816404104 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:21.816425085 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:21.816570997 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.816751003 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.816761971 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.816879988 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:21.816943884 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:21.817390919 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.817440987 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.817758083 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.817837954 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.817842007 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.817964077 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:21.818023920 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:21.818032026 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:21.818073988 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:21.818212986 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:21.818221092 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:21.818260908 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:21.824773073 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.824841022 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.826045036 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.826102972 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.826421022 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:21.826498985 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:21.826558113 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:21.826642036 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:21.827460051 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:21.827511072 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:21.827606916 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.827759027 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.827766895 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.827981949 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.828037977 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:21.828046083 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:21.828078985 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:21.828090906 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:21.828393936 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:21.828401089 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:21.868738890 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.872737885 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:21.877640963 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:21.877655029 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:21.877654076 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:21.877685070 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.098505974 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.098529100 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.098539114 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.098565102 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.098577023 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.098587990 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.098606110 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.098630905 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.098675966 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.098711967 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.115890026 CET	49771	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.115907907 CET	443	49771	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.120239973 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.135040998 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.135081053 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.135119915 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.135126114 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.135157108 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.135214090 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.135255098 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.139033079 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.139046907 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.139091015 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.139092922 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.139144897 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.148638010 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.148644924 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.148685932 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.148701906 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.148714066 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.148741961 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.150703907 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.150739908 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.150747061 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.150793076 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.150804996 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.150859118 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.179625034 CET	49770	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.179651022 CET	443	49770	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.182046890 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.182075977 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.182084084 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.182133913 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.182157993 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.182179928 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.182235956 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.191185951 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.191255093 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.191262007 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.192302942 CET	49768	443	192.168.2.4	86.110.215.66
Jan 1, 2024 00:36:22.192316055 CET	443	49768	86.110.215.66	192.168.2.4
Jan 1, 2024 00:36:22.215338945 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.215348959 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.215403080 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.215410948 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.215451956 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.324728966 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.324775934 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.324827909 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.330915928 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.330935955 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.397151947 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.397224903 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.429748058 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429759979 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429811954 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.429817915 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429828882 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429876089 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429884911 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.429893017 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429918051 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.429924011 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429970980 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.429977894 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.429992914 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.430022955 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.430025101 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.430042982 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.430047035 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.430052996 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.430075884 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.430095911 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.430821896 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.430830956 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.430844069 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.430886984 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.430913925 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.431307077 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.431313992 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.431377888 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.431385994 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.431499958 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.431507111 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.431541920 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.431548119 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.431562901 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.444816113 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.444822073 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.444847107 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.444873095 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.463807106 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.463850975 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.463856936 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.471503019 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.501804113 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.501811981 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.501863003 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.501871109 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.527965069 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.528023005 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.528028011 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.528069019 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.562268972 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.562275887 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.562326908 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.570877075 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.596631050 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.596681118 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.596685886 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.596731901 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.622426033 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.622431993 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.622483969 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.622492075 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.622539043 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.671125889 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.671161890 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.671175003 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.671217918 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.683428049 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.683485985 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.702682972 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.703289986 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.703305006 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.704248905 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.704298019 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.705530882 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.705594063 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.705935001 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.705941916 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.707600117 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.707654953 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.707659960 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.707703114 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.710742950 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.710807085 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.710812092 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.710840940 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.710858107 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.711364985 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711371899 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711416006 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.711421967 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711525917 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711555958 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711568117 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.711572886 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711589098 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.711699963 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711744070 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.711747885 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711757898 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711805105 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.711810112 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711891890 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.711941957 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.711946964 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.724309921 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724354029 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724370003 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724376917 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724395037 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724400997 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724436998 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724442005 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724451065 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724479914 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724524021 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724529982 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724569082 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724626064 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724677086 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724678040 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724695921 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724740028 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724747896 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724752903 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724785089 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724797010 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724806070 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.724819899 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.724843979 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.725285053 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.725320101 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.725332022 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.725337982 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.725349903 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.725361109 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.725382090 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.725382090 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.725393057 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:22.725404024 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.725435019 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:22.731781960 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.731834888 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.752841949 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.752857924 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.756130934 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.756195068 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.762160063 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.798516989 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.798567057 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.798574924 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.798579931 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.798608065 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.835001945 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.835032940 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.835058928 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.835066080 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.835124016 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.871421099 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.871434927 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.871495962 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.883146048 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.883198977 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.916794062 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.916836977 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.916846037 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.916882992 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.942949057 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.942975998 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.943038940 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.943058968 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.943101883 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.943656921 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.943718910 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.943759918 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.945661068 CET	49775	443	192.168.2.4	23.47.48.97
Jan 1, 2024 00:36:22.945673943 CET	443	49775	23.47.48.97	192.168.2.4
Jan 1, 2024 00:36:22.948126078 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.948199987 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.958506107 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.958554029 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.977722883 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.977785110 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.991193056 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991202116 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991257906 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.991265059 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991276979 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991296053 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991339922 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.991362095 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.991431952 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991485119 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.991491079 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991558075 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991616964 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.991621017 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991677999 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991724968 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.991729975 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.991974115 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992027044 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992033958 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992038012 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992067099 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992083073 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992129087 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992139101 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992144108 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992180109 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992185116 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992193937 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992247105 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992257118 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992261887 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992297888 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992301941 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992352009 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992371082 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.992434978 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.992439032 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:22.993839025 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:22.996150017 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.996216059 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:22.996222973 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:22.996260881 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.013966084 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.014043093 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.014050007 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.019049883 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019104958 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019110918 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019118071 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019146919 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019150972 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019165039 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019170046 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019187927 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019203901 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019244909 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019247055 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019254923 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019284964 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019299030 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019315004 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019345045 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019351006 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019361019 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019438028 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019469023 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019490957 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019499063 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019511938 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019543886 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019593000 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019599915 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019639969 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019678116 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019731045 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019731045 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019741058 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019781113 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019790888 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019818068 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019839048 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019844055 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019853115 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019881010 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.019891024 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.019932032 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020081997 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020128012 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020139933 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020148039 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020157099 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020179033 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020224094 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020227909 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020250082 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020266056 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020271063 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020291090 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020289898 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020323992 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020328999 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020344019 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020373106 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020405054 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020421982 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020426989 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020437956 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020442009 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020469904 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020493031 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.020499945 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.020518064 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.030416965 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.032887936 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.032964945 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.032968998 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.033010960 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.036923885 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.036973000 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.036979914 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.053699017 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.053757906 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.053762913 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.075186014 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.075222969 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.075237989 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.075244904 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.075294971 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.075301886 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.075340033 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.090897083 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.090903044 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.090956926 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.090962887 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.106358051 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.106430054 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.106439114 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.126631975 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.126669884 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.126696110 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.126702070 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.126733065 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.145965099 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.145972013 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.146083117 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.146089077 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.165585041 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.165591955 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.165715933 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.165723085 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.176004887 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.176012039 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.176038980 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.176069975 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.176076889 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.176100969 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.194583893 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.194591045 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.194673061 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.194680929 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.208561897 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.208570004 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.208601952 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.208631992 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.208637953 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.208664894 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.222135067 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.222141981 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.222199917 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.222206116 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.239229918 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.239236116 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.239260912 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.239293098 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.239300013 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.239330053 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.251322985 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.251329899 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.251481056 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.251487017 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.263411045 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.263417006 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.263443947 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.263501883 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.263501883 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.263514042 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.267179012 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.267189980 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.267246008 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.267788887 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.267801046 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.271374941 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.271466970 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.271481991 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.271615028 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.271687984 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.271692991 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.271754980 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.271925926 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.271955013 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.271960020 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.271969080 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.271981001 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.272005081 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.272198915 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.272198915 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.278563023 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.278569937 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.278706074 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.278713942 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.289386988 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.289395094 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.289520025 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.289527893 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.303276062 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.303282976 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.303311110 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.303411007 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.303411007 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.303420067 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.313405991 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.313412905 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.313821077 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.313863039 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.313868999 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.313880920 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.313899040 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.313915014 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.313941956 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314050913 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314091921 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314116955 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314124107 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314152956 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314277887 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314332962 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314367056 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314373016 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314400911 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314404964 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314450979 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314483881 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314488888 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314500093 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314518929 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314534903 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314569950 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314575911 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314588070 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314599037 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314623117 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314651966 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314656019 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314666986 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314702034 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314702034 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314713001 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314739943 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314744949 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314770937 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314771891 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314846992 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314876080 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314882994 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314898014 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314912081 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314948082 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314975023 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.314979076 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.314989090 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315007925 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315018892 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315047026 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315052032 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315076113 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315212965 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315246105 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315279007 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315282106 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315290928 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315310955 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315335035 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315360069 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315365076 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315388918 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315402031 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315423965 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315454006 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315457106 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315468073 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315489054 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315495968 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315541029 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315541029 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315546989 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315618038 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315673113 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315697908 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315704107 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315713882 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315740108 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315789938 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315819979 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315824032 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315833092 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315865993 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315882921 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315886974 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315886974 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315896988 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315948963 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315979004 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.315984964 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.315993071 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316020012 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316046953 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316076994 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316082001 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316093922 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316112995 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316126108 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316154003 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316159964 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316170931 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316188097 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316206932 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316241026 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316241980 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316255093 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316272020 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316283941 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316308975 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316315889 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316380978 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.316493988 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.316493988 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.319123030 CET	49773	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:23.319133997 CET	443	49773	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:23.324877024 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.324883938 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.325104952 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.325112104 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.334230900 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.334238052 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.334297895 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.334306002 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.346509933 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.346518040 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.346601009 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.346607924 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.355212927 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.355220079 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.355245113 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.355274916 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.355283022 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.355312109 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.361038923 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.361141920 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.361148119 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.369529963 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.369539022 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.369657040 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.369663000 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.380465984 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.380472898 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.380553007 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.380561113 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.388561010 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.388569117 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.388675928 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.388684034 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.391227961 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.391386986 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.391484976 CET	49769	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:23.391493082 CET	443	49769	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:23.504493952 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:23.504548073 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:23.504687071 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:23.609882116 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.609884024 CET	49738	443	192.168.2.4	142.250.115.104
Jan 1, 2024 00:36:23.609894991 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.609905958 CET	443	49738	142.250.115.104	192.168.2.4
Jan 1, 2024 00:36:23.609977007 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.612607956 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.612612963 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.656063080 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.665025949 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.665065050 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.666081905 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.666189909 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.695736885 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.700819969 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.705462933 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.705481052 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.709692955 CET	49772	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:23.709708929 CET	443	49772	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:23.757652998 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.782732010 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:23.782763958 CET	443	49784	77.88.21.179	192.168.2.4
Jan 1, 2024 00:36:23.782895088 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:23.783209085 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:23.783220053 CET	443	49784	77.88.21.179	192.168.2.4
Jan 1, 2024 00:36:23.783765078 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:23.783797979 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:23.783937931 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:23.784106970 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:23.784126043 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:23.784611940 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:23.784643888 CET	443	49786	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:23.787919044 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:23.789093018 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:23.789104939 CET	443	49786	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:23.895992994 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.896020889 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.896137953 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.896152020 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.896270990 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:23.896881104 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.896950960 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:23.897048950 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:24.084553957 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.084588051 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.084733963 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.088155985 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.088177919 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.089442968 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.089484930 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.089562893 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.098985910 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.099013090 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.099178076 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.099594116 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.099613905 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.103252888 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.103261948 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.104033947 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.104067087 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.104155064 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.107484102 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.107503891 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.108865976 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.108865976 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.108891964 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.108903885 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.108959913 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.108959913 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.109687090 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.109687090 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.109704018 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.109718084 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.112051010 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:24.112071991 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:24.112171888 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:24.112696886 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:24.112708092 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:24.116190910 CET	49782	443	192.168.2.4	23.47.52.50
Jan 1, 2024 00:36:24.116213083 CET	443	49782	23.47.52.50	192.168.2.4
Jan 1, 2024 00:36:24.203485966 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:24.203922033 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:24.203943968 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:24.207758904 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:24.208679914 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:24.210987091 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:24.252784967 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:24.340929031 CET	443	49786	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.365475893 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.365495920 CET	443	49786	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.366657019 CET	443	49786	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.366719007 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.371114016 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.371192932 CET	443	49786	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.373003006 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:24.373596907 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:24.373606920 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:24.374619961 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:24.374675035 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:24.378127098 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:24.378199100 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:24.397525072 CET	443	49784	77.88.21.179	192.168.2.4
Jan 1, 2024 00:36:24.398786068 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:24.398801088 CET	443	49784	77.88.21.179	192.168.2.4
Jan 1, 2024 00:36:24.399733067 CET	443	49784	77.88.21.179	192.168.2.4
Jan 1, 2024 00:36:24.399792910 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:24.423454046 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.423466921 CET	443	49786	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.453249931 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:24.453325987 CET	443	49784	77.88.21.179	192.168.2.4
Jan 1, 2024 00:36:24.467991114 CET	49786	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.481681108 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:24.481692076 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:24.498769999 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:24.498776913 CET	443	49784	77.88.21.179	192.168.2.4
Jan 1, 2024 00:36:24.547710896 CET	49784	443	192.168.2.4	77.88.21.179
Jan 1, 2024 00:36:24.611645937 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:24.615606070 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.637887955 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.637898922 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.639000893 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.639060974 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.643762112 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.644232988 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.644237995 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.647480011 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.659498930 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.670870066 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.691906929 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:24.693089962 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.698436022 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.707721949 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.707734108 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.708264112 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.708282948 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.708503962 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:24.708512068 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:24.708888054 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.708909988 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:24.708950043 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.709017992 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.709042072 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.709243059 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.709266901 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.709630013 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.709677935 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.710390091 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.710407972 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.710441113 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.710479021 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.712199926 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:24.712276936 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:24.713613987 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.713902950 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.713975906 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.715179920 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.715235949 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.715797901 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.715889931 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.716489077 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.716556072 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.717153072 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.717169046 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.717674971 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:24.717709064 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:24.717775106 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.717781067 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.717859983 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.717868090 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.717914104 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.717921972 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.718061924 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.718071938 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.718209982 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.718266964 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.719048023 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.719114065 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.719454050 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.719460964 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.768537998 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.768625975 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.812055111 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.812067032 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:24.812067986 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.812067986 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.812072992 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:24.955574989 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.043457031 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.043502092 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.043555975 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.045180082 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.045207024 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.045311928 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.045653105 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.045664072 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.046080112 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.046087980 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.161478996 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.161518097 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.161525011 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.161539078 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.161545038 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.161547899 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.161601067 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.161629915 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.161681890 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.310997963 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311028957 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311036110 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311068058 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311086893 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311094046 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311095953 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.311108112 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311119080 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.311141968 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.311162949 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.312041998 CET	49787	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.312057972 CET	443	49787	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335532904 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335566044 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335572958 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335609913 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335625887 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335639000 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335645914 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.335659027 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.335688114 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.335710049 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.373949051 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.373960972 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.373980999 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.373987913 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.374008894 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.374053955 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.374058962 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.374135971 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.374458075 CET	49792	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.374481916 CET	443	49792	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.376642942 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.376679897 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.376732111 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.377280951 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.377296925 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382317066 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382342100 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382349014 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382366896 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382384062 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382390022 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382419109 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.382447958 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.382462025 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.382489920 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.383080006 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.383106947 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.383116007 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.383137941 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.383150101 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.383157969 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.383176088 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.383205891 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.383219957 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.383244991 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.392781973 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.392803907 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.392812014 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.392824888 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.392832994 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.392834902 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.392851114 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.392869949 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.392899036 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.392927885 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.473963022 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.474025011 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.474072933 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.474086046 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.502980947 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.503046989 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.503056049 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.505487919 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.541830063 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.541877031 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.541897058 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.541929960 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.571046114 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.571121931 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.572439909 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.572449923 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.572524071 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.572535992 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.572551966 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.572592974 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.651576996 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.651593924 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.690279007 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690290928 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690356016 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690367937 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690373898 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690382957 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.690411091 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690412045 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690424919 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690473080 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.690504074 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.690504074 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.690504074 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.690516949 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.690623999 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.692404985 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.698211908 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.698230028 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.698259115 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.698302031 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.698316097 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.698344946 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.698378086 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.709498882 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.709573030 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.709578991 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.709639072 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.775418043 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.775492907 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.792380095 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.792444944 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.806988955 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.811203957 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.811224937 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.811310053 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.811321974 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.811444044 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.818346977 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.818382978 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.818454981 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.818465948 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.818521976 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.841141939 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.841216087 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.846688032 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.846704960 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.847048998 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.847070932 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.847825050 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.847897053 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.848269939 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.848324060 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.848352909 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.860235929 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.860281944 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.879276037 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.879401922 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.879614115 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.879714012 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.884207964 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.884227991 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.898176908 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.898255110 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.915483952 CET	49789	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.915510893 CET	443	49789	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.920389891 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.920434952 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.920464993 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.920469999 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.920480967 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.920507908 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.920535088 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.924421072 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.924475908 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.925518990 CET	49788	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.925532103 CET	443	49788	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.938673973 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.954685926 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.954713106 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.954782963 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.954811096 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.954828978 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.954855919 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.956473112 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.956577063 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.956641912 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.958898067 CET	49791	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.958911896 CET	443	49791	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.961641073 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.961684942 CET	443	49796	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:25.961735010 CET	49796	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:25.966813087 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.966831923 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.967200994 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.977808952 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:25.977893114 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:25.982608080 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:25.982667923 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:25.983129978 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.008265018 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:26.008285999 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:26.008691072 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.008740902 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.024734974 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.028213024 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.028326035 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.034409046 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.034455061 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.051846981 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.051886082 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.051958084 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.052382946 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.052396059 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.058861017 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.058945894 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.060616970 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.060647011 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.060693026 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.060724020 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.060745955 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.060781956 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.071026087 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.071079016 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.107793093 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.107847929 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.111790895 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:26.113957882 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.114037991 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.135646105 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.135667086 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.135751009 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.135773897 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.135812998 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.150651932 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.150708914 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.162899017 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.162949085 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.187422991 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.187517881 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.199640036 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.199683905 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.206721067 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.206780910 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.206839085 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.206855059 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.206880093 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.206897020 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.221386909 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.221447945 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.221467972 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.221481085 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.221524000 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.224116087 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.224206924 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.230438948 CET	49790	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.230454922 CET	443	49790	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.236346960 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.236390114 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.246752977 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.246787071 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.246854067 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.247236967 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.247248888 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.271455050 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.271495104 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.271526098 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.271542072 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.271574020 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.303601980 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.303651094 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.313972950 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.314023972 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.336853027 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.336909056 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.336942911 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.336957932 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.337054968 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.355335951 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.355403900 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.361073971 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.361118078 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.372255087 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.372307062 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.377860069 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.377901077 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.394634962 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.394678116 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.394689083 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.394702911 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.394726038 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.410836935 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.410908937 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.410922050 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.411086082 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.416196108 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.416260958 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.431952000 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.432005882 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.432008982 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.432018042 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.432051897 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.447340012 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.447402000 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.452481031 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.452523947 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.462569952 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.462634087 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.467505932 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.467567921 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.482269049 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.482326031 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.482340097 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.482382059 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.496856928 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.496937037 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.501707077 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.501748085 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.515955925 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.516011000 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.516021967 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.516159058 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.530040026 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.530097961 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.534641027 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.534682035 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.543867111 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.543951988 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.548474073 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.548512936 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.548523903 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.548608065 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.548648119 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.549688101 CET	49793	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:26.549709082 CET	443	49793	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:26.568629980 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.568664074 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.568727016 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.569246054 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.569257021 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.626904964 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.627823114 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.627837896 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.628739119 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.631970882 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.632760048 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.632816076 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.632899046 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.632922888 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.633119106 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.633145094 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.633161068 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.633198977 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.633208990 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.633234978 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.633244991 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.692578077 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.692595005 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.748704910 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:26.748744965 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:26.748785019 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:26.749095917 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:26.749106884 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:26.797221899 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.798589945 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.798610926 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.799602032 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.799679995 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.814809084 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.814882994 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.814980030 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.814992905 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:26.815049887 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.876095057 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:26.935256958 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.935270071 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.935295105 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.935338974 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.935369015 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:26.935385942 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:26.935506105 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.057934046 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.057960033 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.058001041 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.058012962 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.058051109 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.058074951 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.137023926 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.137551069 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.137563944 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.138447046 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.138519049 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.139411926 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.139472961 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.139775991 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.139784098 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.177033901 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.177062035 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.177115917 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.177143097 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.177166939 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.177490950 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.204204082 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.204233885 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.204272032 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.204324007 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.204442024 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.210459948 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.220927000 CET	49800	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.220952988 CET	443	49800	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.241173029 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.241214991 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.241295099 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.242468119 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.242489100 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.263189077 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.263216972 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.263267994 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.263281107 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.263314009 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.263338089 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.318013906 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:27.318413973 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:27.318424940 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:27.319422007 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:27.319560051 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:27.319570065 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:27.319631100 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:27.320194960 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:27.320251942 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:27.320664883 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:27.320681095 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:27.344132900 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.344243050 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.344289064 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.345477104 CET	49801	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.345494986 CET	443	49801	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.347501040 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:27.355485916 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.355513096 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.355573893 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.355591059 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.355614901 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.355638981 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.392741919 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:27.424437046 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.424464941 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.424586058 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.424608946 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.425493002 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.464162111 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.464193106 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.464243889 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.464257956 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.464294910 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.464302063 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.466171026 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:27.505081892 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.505103111 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.505162001 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.505173922 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.505198956 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.505212069 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.541414022 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.541457891 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.541490078 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.541497946 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.541510105 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.541532040 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.579227924 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.579247952 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.579282045 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.579289913 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.579314947 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.579333067 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.619204044 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.619226933 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.619272947 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.619301081 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.619317055 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.619441986 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.644190073 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:27.644299984 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:27.644350052 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:27.654619932 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.654655933 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.654700041 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.654707909 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.654736996 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.654752016 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.684973955 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.685005903 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.685046911 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.685055971 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.685085058 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.685103893 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.710612059 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.710722923 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.710777998 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.718251944 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.718267918 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.718331099 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.718339920 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.721497059 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.744129896 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.744152069 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.744234085 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.744241953 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.745506048 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.767884970 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.767910957 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.767962933 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.767977953 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.767997026 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.768022060 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.793482065 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.793508053 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.793570995 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.793596029 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.797497034 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.810062885 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.813895941 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.813925028 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.813963890 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.813972950 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.814004898 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.814026117 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.836201906 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.836224079 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.836285114 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.836294889 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.836324930 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.836337090 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.854281902 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.854305029 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.854383945 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.854394913 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.854435921 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.868674040 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.868697882 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.869086981 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.870368958 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.871038914 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.871100903 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.871615887 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.871640921 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.874288082 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.874334097 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.874387026 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.874397039 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.874423027 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.874443054 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.874988079 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.875027895 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.876485109 CET	49783	443	192.168.2.4	87.250.251.119
Jan 1, 2024 00:36:27.876502037 CET	443	49783	87.250.251.119	192.168.2.4
Jan 1, 2024 00:36:27.890435934 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.890455008 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.890494108 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.890506029 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.890542984 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.890552998 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.908999920 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.909018040 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.909056902 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.909064054 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.909111977 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.922111988 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.922131062 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.922188044 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.922197104 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.922228098 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.931859016 CET	49803	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.931874990 CET	443	49803	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.935775042 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.935817003 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.935874939 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.938826084 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.938842058 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.938884020 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.938890934 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.938935995 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.944483995 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:27.944497108 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:27.952617884 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.952641964 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.952670097 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.952677965 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.952707052 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.952740908 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.968173981 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.968190908 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.968240023 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.968249083 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.968324900 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.982299089 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.982326031 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.982355118 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.982362032 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.982410908 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.982410908 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.994610071 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.994641066 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.994683027 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.994693995 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:27.994721889 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:27.994740963 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.008696079 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.008725882 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.008763075 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.008770943 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.008795977 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.008816004 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.020535946 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.020555973 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.020590067 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.020596981 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.020631075 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.020631075 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.033114910 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.033132076 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.033201933 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.033210993 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.033292055 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.044527054 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.044543028 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.044612885 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.044620037 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.044651031 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.044670105 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.058715105 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.058732033 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.058784962 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.058792114 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.058824062 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.058835030 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.069881916 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.069900036 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.069937944 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.069945097 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.069977045 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.069994926 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.080611944 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.080634117 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.080666065 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.080678940 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.080701113 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.080718040 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.080729008 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.080763102 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.081504107 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.121654034 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.121722937 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.121798038 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.121809006 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.125514984 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.151087046 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.151134968 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.151139975 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.201242924 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.201276064 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.201339006 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.202363968 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.202377081 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.211569071 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.224009037 CET	49798	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:28.224026918 CET	443	49798	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:28.234864950 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:28.234889984 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:28.234942913 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:28.236763000 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:28.236777067 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:28.273751020 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.273777962 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.273895025 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.274305105 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.274316072 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.374418974 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.374512911 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.374593019 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.496773958 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496789932 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496845961 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496870995 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.496884108 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496896029 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496911049 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.496918917 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496932983 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.496937037 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496951103 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496953964 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.496994972 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.496995926 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.497003078 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.497023106 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.497035980 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.522885084 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.526401997 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.526458979 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.526465893 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.529495001 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.585012913 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.585028887 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.585457087 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.586922884 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.587012053 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.588149071 CET	49807	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.588176012 CET	443	49807	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.589624882 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.589654922 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.711913109 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.711926937 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.711994886 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.741554976 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.741635084 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.771156073 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.771264076 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.787493944 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.787587881 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.793184996 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.801203012 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.801266909 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.814208984 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.817512035 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.817532063 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.825581074 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:28.840048075 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.840099096 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.840106964 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.840145111 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.853753090 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.853833914 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.867557049 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:28.880585909 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.880650997 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.880656958 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.881498098 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.917427063 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.917480946 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:28.965442896 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:28.975892067 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.975970030 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:28.989650011 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:28.989721060 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.030219078 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.030299902 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.043507099 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.043572903 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.069988966 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.070055008 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.083369017 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.083440065 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.095396042 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:29.095505953 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:29.095575094 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:29.110496998 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.110588074 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.131707907 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.131776094 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.152674913 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.152766943 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.162861109 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.162970066 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482145071 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482208014 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482250929 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482264042 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482278109 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482290030 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482307911 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482326031 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482331038 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482340097 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482373953 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482378006 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482387066 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482434034 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482434988 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482445955 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482477903 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482485056 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482522964 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482523918 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482534885 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482564926 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482567072 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482575893 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482611895 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482614040 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482620955 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482652903 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482656002 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482661009 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482692957 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482692957 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482701063 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482728958 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482733011 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482741117 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482767105 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482777119 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482779026 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482784986 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482815981 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482821941 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482860088 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482867002 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482871056 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482896090 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482907057 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482909918 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482930899 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482932091 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482955933 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.482959986 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.482968092 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483004093 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483007908 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483015060 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483041048 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483043909 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483052015 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483092070 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483098030 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483104944 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483136892 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483151913 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483165979 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483174086 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483189106 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483191967 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483217001 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483221054 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483227968 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483258963 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483262062 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483269930 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483292103 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483295918 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483308077 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483314991 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483330965 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:29.483403921 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:29.483443022 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:30.094384909 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:30.096932888 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.096963882 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.098161936 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.098203897 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.098241091 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.100145102 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.100178957 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.100749016 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.101650953 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.101672888 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.102864981 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.102880001 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.102926970 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.108088970 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.108169079 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.109076023 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.109096050 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.109153032 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.110531092 CET	49809	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.110554934 CET	443	49809	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.115326881 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.115453959 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.117211103 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.117290974 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.117558956 CET	49804	443	192.168.2.4	5.255.255.70
Jan 1, 2024 00:36:30.117573977 CET	443	49804	5.255.255.70	192.168.2.4
Jan 1, 2024 00:36:30.119126081 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.119146109 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.164916039 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.164938927 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.166893005 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.166918993 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.167375088 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.167403936 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.169605970 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:30.169615030 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:30.169672012 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:30.171328068 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:30.172483921 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:30.172497034 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:30.207348108 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.216753006 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:30.226958990 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:30.226978064 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:30.227030039 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:30.227629900 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:30.227642059 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:30.229402065 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.256181002 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:30.256256104 CET	443	49797	77.88.21.119	192.168.2.4
Jan 1, 2024 00:36:30.256300926 CET	49797	443	192.168.2.4	77.88.21.119
Jan 1, 2024 00:36:30.268110037 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.268141031 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.268212080 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.269038916 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.269052029 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.270350933 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.270376921 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.270441055 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.270885944 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.270900011 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.272213936 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.272236109 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.272280931 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.272667885 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.272680998 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.276743889 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.292932987 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.292959929 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.292999983 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.293781042 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.293792009 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.295304060 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.295325994 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.295377016 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.296400070 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.296425104 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.296483994 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.297590971 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.297601938 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.298381090 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:30.298387051 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:30.298430920 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:30.298816919 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.298830986 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.299045086 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:30.299055099 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:30.374213934 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.459323883 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.459326982 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.459407091 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.459434986 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.459462881 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.459490061 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.464247942 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.464339972 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.464387894 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.569176912 CET	49811	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.569197893 CET	443	49811	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.571043968 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.571070910 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.571139097 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.571933985 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.571943045 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.581053019 CET	49812	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.581072092 CET	443	49812	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.583641052 CET	49810	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.583652973 CET	443	49810	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.605947018 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.605977058 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.606089115 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.606249094 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.606267929 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.608401060 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.608432055 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.608483076 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.608789921 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.608802080 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.610307932 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.610330105 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.610379934 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.610666037 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.610677004 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.629933119 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.629959106 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.629968882 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.629995108 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.630009890 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.630019903 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.631721973 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.631740093 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.631799936 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.697597980 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.697877884 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.697899103 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.698187113 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.698633909 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.698685884 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.699107885 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:30.740736008 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:30.758977890 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:30.759251118 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:30.759262085 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:30.759592056 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:30.759953976 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:30.760015011 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:30.760174990 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:30.760210991 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:30.842061043 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.842283010 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.842292070 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.842998981 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.843410015 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.843511105 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.843626976 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.844971895 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.848289967 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.852374077 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.852406025 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.852443933 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.852453947 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.852463961 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.852478981 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.852499962 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.852519989 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.855984926 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.856219053 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.856232882 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.856362104 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.856374025 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.856621027 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.856647015 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.856662035 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.857156992 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.857224941 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.857289076 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.857306957 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.857357979 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.857542038 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.857592106 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.858099937 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.858161926 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.858247995 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.858258963 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.858967066 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.859024048 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.859083891 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.859092951 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.861682892 CET	49785	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.861705065 CET	443	49785	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.862518072 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.862540007 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.862597942 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.863765955 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:30.865931988 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:30.865942001 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:30.866471052 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.866482019 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.866810083 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:30.866859913 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:30.869400024 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:30.869467020 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:30.869714022 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:30.869724989 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:30.870964050 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.871812105 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.871822119 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.872855902 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.872951031 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.873330116 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.873385906 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.873437881 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.873444080 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.877317905 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.877500057 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.877521038 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.877804995 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.878163099 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.878215075 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.878321886 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:30.878345013 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:30.888744116 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.904742956 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:30.971232891 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.971254110 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:30.971254110 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.006777048 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.006804943 CET	443	49829	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.006896019 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.006972075 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.008212090 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.008239985 CET	443	49829	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.111589909 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.169296026 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.181929111 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.196628094 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.206322908 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.217660904 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.217667103 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.275130033 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.275196075 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.279726982 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.373866081 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.373867989 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.400739908 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.405112028 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.417562962 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.417579889 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.419796944 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.419806957 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.423597097 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.425751925 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.425817013 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.429130077 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.429153919 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.429162025 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.429167032 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.431492090 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.431509018 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.432133913 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.435497999 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.449021101 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.449040890 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.449096918 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.449135065 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.449218988 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.451828957 CET	49813	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.451853991 CET	443	49813	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.452200890 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.452213049 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.452543974 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.452545881 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.452558041 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.452558041 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.452622890 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.452842951 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.452862024 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.453037977 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.453063965 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.453073978 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.453744888 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.453839064 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.454114914 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.454144001 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.454197884 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.454250097 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.455995083 CET	49830	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.456017017 CET	443	49830	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.456278086 CET	49830	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.456379890 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.456501007 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.456568003 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.457216978 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.457290888 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.457812071 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.457882881 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.458287954 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.458350897 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.458901882 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.459145069 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.460870028 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.460935116 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.461338997 CET	49830	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.461352110 CET	443	49830	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.463912010 CET	49821	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.463918924 CET	443	49821	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.465182066 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.465215921 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.465426922 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.465435982 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.465439081 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.465475082 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.465548992 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:31.465645075 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.465652943 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.466228008 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.473871946 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.473897934 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.474277973 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.474991083 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.475059032 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.475322008 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.480669022 CET	49818	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.480684996 CET	443	49818	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.481021881 CET	49831	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.481045008 CET	443	49831	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.481884003 CET	49820	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.481898069 CET	443	49820	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.481981993 CET	49831	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.482769012 CET	49816	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.482774973 CET	49831	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.482779026 CET	443	49816	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.482785940 CET	443	49831	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.494858980 CET	49832	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.494883060 CET	443	49832	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.495461941 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.495476007 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.495521069 CET	49832	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.495542049 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.496117115 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.496117115 CET	49832	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.496126890 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.496141911 CET	443	49832	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.496196985 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.496575117 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.496586084 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.496856928 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.496867895 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.497225046 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.497241020 CET	443	49835	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.497320890 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.497634888 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.497648001 CET	443	49835	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.506395102 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.506397963 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.512746096 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:31.514714956 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.514739990 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.514749050 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.514775991 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.514786959 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.514801025 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.514807940 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.514825106 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.514833927 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.514849901 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.514894009 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.516325951 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.516349077 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.516366959 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.516433001 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.516453981 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.516479969 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.516549110 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.520739079 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.523303986 CET	80	49723	208.111.176.64	192.168.2.4
Jan 1, 2024 00:36:31.523958921 CET	49723	80	192.168.2.4	208.111.176.64
Jan 1, 2024 00:36:31.528515100 CET	49723	80	192.168.2.4	208.111.176.64
Jan 1, 2024 00:36:31.531337023 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.541357040 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.541484118 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.541496038 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.541680098 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.545931101 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.546003103 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.546025038 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.546072960 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.546216011 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.546216011 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.546224117 CET	443	49817	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.547652960 CET	49817	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.548952103 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.548969984 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.548978090 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.548991919 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.548998117 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.549000978 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.549074888 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.549091101 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.549115896 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.549209118 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.552380085 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.552413940 CET	443	49836	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.552963018 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.553406954 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.553423882 CET	443	49836	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.561767101 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.561997890 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.588784933 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.588860035 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.588917017 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.589369059 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.589380026 CET	443	49819	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:31.589405060 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.589699030 CET	49819	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.594438076 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.594453096 CET	443	49837	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.594549894 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.594849110 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.594862938 CET	443	49837	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.611453056 CET	443	49829	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.612549067 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.613893032 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.614622116 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:31.616101027 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.616108894 CET	443	49829	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.617131948 CET	443	49829	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.617435932 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.617605925 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.617605925 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.617669106 CET	443	49829	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.648936033 CET	80	49723	208.111.176.64	192.168.2.4
Jan 1, 2024 00:36:31.674568892 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.674588919 CET	443	49829	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:31.749936104 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.750117064 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.750227928 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.750271082 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.750276089 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.750303984 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.750308990 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.750330925 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.750412941 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.751264095 CET	49825	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.751280069 CET	443	49825	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.751915932 CET	49822	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.751930952 CET	443	49822	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.762775898 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.762826920 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.762834072 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.762851954 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.762870073 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.762922049 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.762933016 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.762962103 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.766716957 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.766717911 CET	49838	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.766746044 CET	443	49838	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.766757965 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.766923904 CET	443	49815	213.180.204.36	192.168.2.4
Jan 1, 2024 00:36:31.766964912 CET	49838	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.766967058 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.767019033 CET	49815	443	192.168.2.4	213.180.204.36
Jan 1, 2024 00:36:31.767755985 CET	49838	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:31.767769098 CET	443	49838	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:31.778744936 CET	49829	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:31.786194086 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.786299944 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.786400080 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.802215099 CET	49827	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.802227020 CET	443	49827	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.808163881 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.808239937 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.808317900 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.809443951 CET	49826	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:31.809453011 CET	443	49826	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:31.826708078 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.826770067 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.836857080 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.877470970 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.877677917 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.877691031 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.887729883 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.887945890 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.887963057 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.907892942 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.908118010 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.908149004 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.913258076 CET	49839	443	192.168.2.4	193.3.184.135
Jan 1, 2024 00:36:31.913280964 CET	443	49839	193.3.184.135	192.168.2.4
Jan 1, 2024 00:36:31.913347006 CET	49839	443	192.168.2.4	193.3.184.135
Jan 1, 2024 00:36:31.913624048 CET	49839	443	192.168.2.4	193.3.184.135
Jan 1, 2024 00:36:31.913635969 CET	443	49839	193.3.184.135	192.168.2.4
Jan 1, 2024 00:36:31.922251940 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:31.922277927 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:31.922473907 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:31.923648119 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:31.923659086 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:31.924004078 CET	49841	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.924019098 CET	443	49841	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:31.924079895 CET	49841	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.924349070 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.924376011 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:31.924446106 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.924810886 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.924834967 CET	443	49843	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:31.924967051 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.925189018 CET	49841	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.925205946 CET	443	49841	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:31.925460100 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.925474882 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:31.925746918 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:31.925757885 CET	443	49843	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:31.927615881 CET	49844	443	192.168.2.4	77.88.21.36
Jan 1, 2024 00:36:31.927625895 CET	443	49844	77.88.21.36	192.168.2.4
Jan 1, 2024 00:36:31.927675009 CET	49844	443	192.168.2.4	77.88.21.36
Jan 1, 2024 00:36:31.927983999 CET	49844	443	192.168.2.4	77.88.21.36
Jan 1, 2024 00:36:31.927993059 CET	443	49844	77.88.21.36	192.168.2.4
Jan 1, 2024 00:36:31.945664883 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:31.945678949 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:31.945811033 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:31.946105003 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:31.946122885 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:31.948851109 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.948859930 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.948939085 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.948961020 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.958725929 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.959075928 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.959084988 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.979104996 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:31.979150057 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:31.979157925 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.044280052 CET	443	49830	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.044548988 CET	49830	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:32.044569969 CET	443	49830	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.044869900 CET	443	49830	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.045222044 CET	49830	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:32.045279026 CET	443	49830	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.045424938 CET	49830	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:32.056159019 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.056421995 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.059186935 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:32.059196949 CET	443	49823	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.059264898 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:32.059294939 CET	49823	443	192.168.2.4	77.88.21.90
Jan 1, 2024 00:36:32.087382078 CET	443	49831	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.087589979 CET	49831	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.087600946 CET	443	49831	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.087941885 CET	443	49831	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.088387012 CET	49831	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.088387012 CET	49831	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.088398933 CET	443	49831	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.088442087 CET	443	49831	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.092736959 CET	443	49830	77.88.21.90	192.168.2.4
Jan 1, 2024 00:36:32.102494001 CET	443	49832	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:32.102761030 CET	49832	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:32.102777004 CET	443	49832	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:32.103060961 CET	443	49832	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:32.103511095 CET	49832	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:32.103511095 CET	49832	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:32.103535891 CET	443	49832	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:32.103571892 CET	443	49832	93.158.134.119	192.168.2.4
Jan 1, 2024 00:36:32.111103058 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.111407995 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.111423969 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.112298965 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.112483025 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.112698078 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.112757921 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.112785101 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.119597912 CET	443	49835	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.119877100 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.119893074 CET	443	49835	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.120810032 CET	443	49835	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.120975018 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.121309042 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.121309042 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.121367931 CET	443	49835	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.124901056 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.124910116 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.125044107 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.125057936 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.127423048 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.127780914 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.127794027 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.128770113 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.128839016 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.129463911 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.129515886 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.129566908 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.138535023 CET	443	49836	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.138916016 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.138931990 CET	443	49836	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.139915943 CET	443	49836	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.139975071 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.140266895 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.140326977 CET	443	49836	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.140599012 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.140605927 CET	443	49836	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.140836000 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.140868902 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.140892029 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.140902996 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.141015053 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.160732031 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.163526058 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.163546085 CET	443	49835	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.172746897 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.172756910 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.172818899 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.174400091 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.174420118 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.174426079 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.174448967 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.174459934 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.174473047 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.174511909 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.174535036 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.174549103 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.174590111 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.176727057 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.180026054 CET	49846	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.180058956 CET	443	49846	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.180114031 CET	49846	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.180692911 CET	49846	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.180701971 CET	443	49846	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.183310032 CET	49847	443	192.168.2.4	87.250.250.90
Jan 1, 2024 00:36:32.183332920 CET	443	49847	87.250.250.90	192.168.2.4
Jan 1, 2024 00:36:32.183384895 CET	49847	443	192.168.2.4	87.250.250.90
Jan 1, 2024 00:36:32.184305906 CET	49847	443	192.168.2.4	87.250.250.90
Jan 1, 2024 00:36:32.184325933 CET	443	49847	87.250.250.90	192.168.2.4
Jan 1, 2024 00:36:32.188565969 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.188620090 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.191049099 CET	443	49837	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.196194887 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.196208000 CET	443	49837	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.197211981 CET	443	49837	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.197272062 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.204036951 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.204104900 CET	443	49837	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.204430103 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.205271959 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.205342054 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.205348015 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.205388069 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.208576918 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.208585978 CET	443	49837	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.210418940 CET	49831	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.210431099 CET	49832	443	192.168.2.4	93.158.134.119
Jan 1, 2024 00:36:32.210442066 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.210454941 CET	443	49833	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.210488081 CET	49836	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.210488081 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.210498095 CET	443	49834	87.250.247.182	192.168.2.4
Jan 1, 2024 00:36:32.233905077 CET	49828	443	192.168.2.4	87.250.247.183
Jan 1, 2024 00:36:32.233917952 CET	443	49828	87.250.247.183	192.168.2.4
Jan 1, 2024 00:36:32.236388922 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.236455917 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.236464977 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.236675024 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.252247095 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.252316952 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.265423059 CET	49835	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.265861034 CET	49837	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.268151045 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.268198013 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.284063101 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.284097910 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.284112930 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.300064087 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.300117016 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.300138950 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.315537930 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.315586090 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.315593958 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.330162048 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.330221891 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.330229998 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.359447956 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.359575033 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.359582901 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.359925985 CET	49834	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.359930038 CET	49833	443	192.168.2.4	87.250.247.182
Jan 1, 2024 00:36:32.361094952 CET	443	49838	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:32.361471891 CET	49838	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:32.361484051 CET	443	49838	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:32.361818075 CET	443	49838	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:32.362392902 CET	49838	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:32.362457991 CET	443	49838	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:32.362962961 CET	49838	443	192.168.2.4	178.154.131.216
Jan 1, 2024 00:36:32.374716043 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.374772072 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.374778032 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.374825954 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.388773918 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.388827085 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.403901100 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:32.404110909 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:32.404129982 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:32.404745102 CET	443	49838	178.154.131.216	192.168.2.4
Jan 1, 2024 00:36:32.405072927 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:32.405126095 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:32.406070948 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:32.406119108 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:32.406244993 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:32.407097101 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.407144070 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.425489902 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.425501108 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.425548077 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.426753044 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:32.427336931 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:32.427346945 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:32.428342104 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:32.428406000 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:32.429305077 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:32.429366112 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:32.429486990 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:32.435945988 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.435957909 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.436002970 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.452747107 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:32.455774069 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.455780983 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.455835104 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.455843925 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.456032038 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.472711086 CET	49840	443	192.168.2.4	172.240.127.131
Jan 1, 2024 00:36:32.472737074 CET	443	49840	172.240.127.131	192.168.2.4
Jan 1, 2024 00:36:32.472738028 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:32.472768068 CET	49845	443	192.168.2.4	35.177.4.157
Jan 1, 2024 00:36:32.472778082 CET	443	49845	35.177.4.157	192.168.2.4
Jan 1, 2024 00:36:32.477601051 CET	443	49839	193.3.184.135	192.168.2.4
Jan 1, 2024 00:36:32.477890968 CET	49839	443	192.168.2.4	193.3.184.135
Jan 1, 2024 00:36:32.477915049 CET	443	49839	193.3.184.135	192.168.2.4
Jan 1, 2024 00:36:32.478776932 CET	443	49839	193.3.184.135	192.168.2.4
Jan 1, 2024 00:36:32.478874922 CET	49839	443	192.168.2.4	193.3.184.135
Jan 1, 2024 00:36:32.480165005 CET	49839	443	192.168.2.4	193.3.184.135
Jan 1, 2024 00:36:32.480222940 CET	443	49839	193.3.184.135	192.168.2.4
Jan 1, 2024 00:36:32.480304956 CET	49839	443	192.168.2.4	193.3.184.135
Jan 1, 2024 00:36:32.485219955 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.485228062 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.485289097 CET	49814	443	192.168.2.4	5.255.255.77
Jan 1, 2024 00:36:32.494930029 CET	443	49814	5.255.255.77	192.168.2.4
Jan 1, 2024 00:36:32.503119946 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.503403902 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.503427029 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.504431963 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.504506111 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.504518032 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.504565954 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.505033016 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.505089045 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.505134106 CET	49842	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.505146027 CET	443	49842	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.508182049 CET	443	49843	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.508342981 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.508368015 CET	443	49843	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.509331942 CET	443	49843	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.509385109 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.509392023 CET	443	49843	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.509433985 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.509708881 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.509763002 CET	443	49843	77.88.55.60	192.168.2.4
Jan 1, 2024 00:36:32.509836912 CET	49843	443	192.168.2.4	77.88.55.60
Jan 1, 2024 00:36:32.509851933 CET	443	49843	77.88.55.60	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 1, 2024 00:36:08.770093918 CET	192.168.2.4	1.1.1.1	0x5fa7	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.770354986 CET	192.168.2.4	1.1.1.1	0xb147	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:08.770781994 CET	192.168.2.4	1.1.1.1	0x94dd	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.770992994 CET	192.168.2.4	1.1.1.1	0xdde	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:10.033744097 CET	192.168.2.4	1.1.1.1	0xb6f9	Standard query (0)	faq-kak.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:10.034065008 CET	192.168.2.4	1.1.1.1	0xa820	Standard query (0)	faq-kak.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:12.773418903 CET	192.168.2.4	1.1.1.1	0x85fe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.774221897 CET	192.168.2.4	1.1.1.1	0xc65c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:19.953999996 CET	192.168.2.4	1.1.1.1	0x25a2	Standard query (0)	yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:19.954724073 CET	192.168.2.4	1.1.1.1	0x71cb	Standard query (0)	yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:20.125140905 CET	192.168.2.4	1.1.1.1	0x615a	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.125426054 CET	192.168.2.4	1.1.1.1	0x8529	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:20.182491064 CET	192.168.2.4	1.1.1.1	0xae18	Standard query (0)	an.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.182933092 CET	192.168.2.4	1.1.1.1	0x121f	Standard query (0)	an.yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:22.199645042 CET	192.168.2.4	1.1.1.1	0xdc84	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:22.199981928 CET	192.168.2.4	1.1.1.1	0x26e1	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:22.201220036 CET	192.168.2.4	1.1.1.1	0x2347	Standard query (0)	avatars.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:22.201430082 CET	192.168.2.4	1.1.1.1	0x539	Standard query (0)	avatars.akamai.steamstatic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:23.124838114 CET	192.168.2.4	1.1.1.1	0x22d9	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.125468969 CET	192.168.2.4	1.1.1.1	0xbff8	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:23.128468037 CET	192.168.2.4	1.1.1.1	0x65ce	Standard query (0)	avatars.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.129167080 CET	192.168.2.4	1.1.1.1	0x3d7f	Standard query (0)	avatars.akamai.steamstatic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:23.604295969 CET	192.168.2.4	1.1.1.1	0xfb32	Standard query (0)	yastatic.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.604568958 CET	192.168.2.4	1.1.1.1	0x5702	Standard query (0)	yastatic.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:23.607383966 CET	192.168.2.4	1.1.1.1	0x613a	Standard query (0)	avatars.mds.yandex.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.607616901 CET	192.168.2.4	1.1.1.1	0x293e	Standard query (0)	avatars.mds.yandex.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:23.613301039 CET	192.168.2.4	1.1.1.1	0xfd0e	Standard query (0)	ads.adfox.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:23.613301039 CET	192.168.2.4	1.1.1.1	0x18d2	Standard query (0)	ads.adfox.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:24.710362911 CET	192.168.2.4	1.1.1.1	0xb9fb	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:24.710922003 CET	192.168.2.4	1.1.1.1	0xd154	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:25.918876886 CET	192.168.2.4	1.1.1.1	0xbd1b	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:25.921046019 CET	192.168.2.4	1.1.1.1	0x3d22	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:26.600599051 CET	192.168.2.4	1.1.1.1	0xfc10	Standard query (0)	yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.601440907 CET	192.168.2.4	1.1.1.1	0xbb52	Standard query (0)	yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:27.967895985 CET	192.168.2.4	1.1.1.1	0xbcd4	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:27.968122959 CET	192.168.2.4	1.1.1.1	0xe3f7	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:30.103513956 CET	192.168.2.4	1.1.1.1	0xaf1	Standard query (0)	favicon.yandex.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.104172945 CET	192.168.2.4	1.1.1.1	0xfea7	Standard query (0)	favicon.yandex.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:30.168519020 CET	192.168.2.4	1.1.1.1	0x8460	Standard query (0)	yastatic.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.169482946 CET	192.168.2.4	1.1.1.1	0x1653	Standard query (0)	yastatic.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:30.883574009 CET	192.168.2.4	1.1.1.1	0x787	Standard query (0)	avatars.mds.yandex.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.884090900 CET	192.168.2.4	1.1.1.1	0x19c7	Standard query (0)	avatars.mds.yandex.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:31.788182974 CET	192.168.2.4	1.1.1.1	0x1e88	Standard query (0)	ysa-static.passport.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.788543940 CET	192.168.2.4	1.1.1.1	0x9b2	Standard query (0)	ysa-static.passport.yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:31.789391994 CET	192.168.2.4	1.1.1.1	0x1386	Standard query (0)	px.arcspire.io	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.789637089 CET	192.168.2.4	1.1.1.1	0xd72	Standard query (0)	px.arcspire.io	65	IN (0x0001)	false
Jan 1, 2024 00:36:31.790312052 CET	192.168.2.4	1.1.1.1	0x26d2	Standard query (0)	acint.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.790569067 CET	192.168.2.4	1.1.1.1	0xf410	Standard query (0)	acint.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:31.799753904 CET	192.168.2.4	1.1.1.1	0x1ec6	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.799985886 CET	192.168.2.4	1.1.1.1	0x1257	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:31.800483942 CET	192.168.2.4	1.1.1.1	0x803a	Standard query (0)	yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.800801039 CET	192.168.2.4	1.1.1.1	0x5f21	Standard query (0)	yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:31.804908037 CET	192.168.2.4	1.1.1.1	0x776	Standard query (0)	favicon.yandex.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.805094957 CET	192.168.2.4	1.1.1.1	0x1f3	Standard query (0)	favicon.yandex.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:32.035136938 CET	192.168.2.4	1.1.1.1	0x2a44	Standard query (0)	ysa-static.passport.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.059189081 CET	192.168.2.4	1.1.1.1	0xd3c9	Standard query (0)	an.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.059524059 CET	192.168.2.4	1.1.1.1	0x96bd	Standard query (0)	an.yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:32.967678070 CET	192.168.2.4	1.1.1.1	0xffe	Standard query (0)	an.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.968303919 CET	192.168.2.4	1.1.1.1	0xc579	Standard query (0)	an.yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:33.078490019 CET	192.168.2.4	1.1.1.1	0xba1c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.078681946 CET	192.168.2.4	1.1.1.1	0x60ad	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:33.122376919 CET	192.168.2.4	1.1.1.1	0x94d6	Standard query (0)	im.bluevoox.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.122551918 CET	192.168.2.4	1.1.1.1	0x983b	Standard query (0)	im.bluevoox.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:33.355343103 CET	192.168.2.4	1.1.1.1	0xdafa	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.355619907 CET	192.168.2.4	1.1.1.1	0x635c	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:33.760288000 CET	192.168.2.4	1.1.1.1	0xaa0f	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:33.760288000 CET	192.168.2.4	1.1.1.1	0x7f19	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.998302937 CET	192.168.2.4	1.1.1.1	0x58c2	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.998496056 CET	192.168.2.4	1.1.1.1	0xa64a	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:34.123202085 CET	192.168.2.4	1.1.1.1	0xbb3b	Standard query (0)	ssp-rtb.sape.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.123511076 CET	192.168.2.4	1.1.1.1	0x672a	Standard query (0)	ssp-rtb.sape.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:34.521867037 CET	192.168.2.4	1.1.1.1	0x137d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.522146940 CET	192.168.2.4	1.1.1.1	0x2d04	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:34.933264017 CET	192.168.2.4	1.1.1.1	0x3165	Standard query (0)	cm.tns-counter.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.933490038 CET	192.168.2.4	1.1.1.1	0x2764	Standard query (0)	cm.tns-counter.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:35.994848013 CET	192.168.2.4	1.1.1.1	0x13f8	Standard query (0)	yandex.digital-services.solutions	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:35.995058060 CET	192.168.2.4	1.1.1.1	0x8d6d	Standard query (0)	yandex.digital-services.solutions	65	IN (0x0001)	false
Jan 1, 2024 00:36:35.995884895 CET	192.168.2.4	1.1.1.1	0x4cb7	Standard query (0)	ad.mail.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:35.995884895 CET	192.168.2.4	1.1.1.1	0xaf30	Standard query (0)	ad.mail.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.011558056 CET	192.168.2.4	1.1.1.1	0x87f	Standard query (0)	dr.yandex.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.011997938 CET	192.168.2.4	1.1.1.1	0x70f0	Standard query (0)	dr.yandex.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:36.014261961 CET	192.168.2.4	1.1.1.1	0xefbe	Standard query (0)	cr.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.014662027 CET	192.168.2.4	1.1.1.1	0xd1c5	Standard query (0)	cr.frontend.weborama.fr	65	IN (0x0001)	false
Jan 1, 2024 00:36:36.286350012 CET	192.168.2.4	1.1.1.1	0x7b8a	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.286549091 CET	192.168.2.4	1.1.1.1	0x202f	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:36.288324118 CET	192.168.2.4	1.1.1.1	0x242f	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.288839102 CET	192.168.2.4	1.1.1.1	0x3824	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:37.224765062 CET	192.168.2.4	1.1.1.1	0x555c	Standard query (0)	dm.hybrid.ai	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.225111961 CET	192.168.2.4	1.1.1.1	0x2d9f	Standard query (0)	dm.hybrid.ai	65	IN (0x0001)	false
Jan 1, 2024 00:36:37.227309942 CET	192.168.2.4	1.1.1.1	0x1102	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.227626085 CET	192.168.2.4	1.1.1.1	0x69f7	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:37.283901930 CET	192.168.2.4	1.1.1.1	0xb70c	Standard query (0)	ad.mail.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.283956051 CET	192.168.2.4	1.1.1.1	0x7d70	Standard query (0)	ad.mail.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:37.538273096 CET	192.168.2.4	1.1.1.1	0x496a	Standard query (0)	dmg.digitaltarget.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.538543940 CET	192.168.2.4	1.1.1.1	0x69ca	Standard query (0)	dmg.digitaltarget.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:37.539164066 CET	192.168.2.4	1.1.1.1	0x81ac	Standard query (0)	dsp.mpartner.digital	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.539444923 CET	192.168.2.4	1.1.1.1	0x323c	Standard query (0)	dsp.mpartner.digital	65	IN (0x0001)	false
Jan 1, 2024 00:36:37.542881012 CET	192.168.2.4	1.1.1.1	0xd2bb	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.543629885 CET	192.168.2.4	1.1.1.1	0x9477	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:38.304737091 CET	192.168.2.4	1.1.1.1	0x6ec9	Standard query (0)	euw-ice.360yield.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.304985046 CET	192.168.2.4	1.1.1.1	0xa610	Standard query (0)	euw-ice.360yield.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:38.307246923 CET	192.168.2.4	1.1.1.1	0x6d09	Standard query (0)	exchange.buzzoola.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.307712078 CET	192.168.2.4	1.1.1.1	0x481f	Standard query (0)	exchange.buzzoola.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:39.613348007 CET	192.168.2.4	1.1.1.1	0x8253	Standard query (0)	eye.targetads.io	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:39.613743067 CET	192.168.2.4	1.1.1.1	0x1c7f	Standard query (0)	eye.targetads.io	65	IN (0x0001)	false
Jan 1, 2024 00:36:39.770930052 CET	192.168.2.4	1.1.1.1	0x6c61	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:39.771620035 CET	192.168.2.4	1.1.1.1	0x5ae4	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:39.875844955 CET	192.168.2.4	1.1.1.1	0x5960	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:39.876066923 CET	192.168.2.4	1.1.1.1	0xb463	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:39.903774023 CET	192.168.2.4	1.1.1.1	0xac2f	Standard query (0)	kimberlite.io	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:39.904710054 CET	192.168.2.4	1.1.1.1	0x4fe6	Standard query (0)	kimberlite.io	65	IN (0x0001)	false
Jan 1, 2024 00:36:40.552792072 CET	192.168.2.4	1.1.1.1	0x142b	Standard query (0)	match.new-programmatic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.553145885 CET	192.168.2.4	1.1.1.1	0x84e4	Standard query (0)	match.new-programmatic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:40.555944920 CET	192.168.2.4	1.1.1.1	0xf0f8	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.556237936 CET	192.168.2.4	1.1.1.1	0x38d1	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:40.767301083 CET	192.168.2.4	1.1.1.1	0x8142	Standard query (0)	mitdmp.whiteboxdigital.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.767761946 CET	192.168.2.4	1.1.1.1	0xfe78	Standard query (0)	mitdmp.whiteboxdigital.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:40.794708967 CET	192.168.2.4	1.1.1.1	0xd0a2	Standard query (0)	nr.bidderstack.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.795331001 CET	192.168.2.4	1.1.1.1	0x44b1	Standard query (0)	nr.bidderstack.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:40.974246025 CET	192.168.2.4	1.1.1.1	0x1b91	Standard query (0)	profile.ssp.rambler.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.974471092 CET	192.168.2.4	1.1.1.1	0x6316	Standard query (0)	profile.ssp.rambler.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:41.206346989 CET	192.168.2.4	1.1.1.1	0xc6d9	Standard query (0)	sm.rtb.mts.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.206845045 CET	192.168.2.4	1.1.1.1	0x3475	Standard query (0)	sm.rtb.mts.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:41.837641001 CET	192.168.2.4	1.1.1.1	0x52b2	Standard query (0)	px.adhigh.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.838421106 CET	192.168.2.4	1.1.1.1	0xb196	Standard query (0)	px.adhigh.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:42.005475998 CET	192.168.2.4	1.1.1.1	0xe482	Standard query (0)	match.360yield.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.005882025 CET	192.168.2.4	1.1.1.1	0x111c	Standard query (0)	match.360yield.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:42.521955967 CET	192.168.2.4	1.1.1.1	0xe270	Standard query (0)	rtb-eu-warsaw.intent.ai	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.522402048 CET	192.168.2.4	1.1.1.1	0x87a1	Standard query (0)	rtb-eu-warsaw.intent.ai	65	IN (0x0001)	false
Jan 1, 2024 00:36:42.570899010 CET	192.168.2.4	1.1.1.1	0x1d34	Standard query (0)	vma.mts.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.571238995 CET	192.168.2.4	1.1.1.1	0x4984	Standard query (0)	vma.mts.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:42.770653963 CET	192.168.2.4	1.1.1.1	0x1aa	Standard query (0)	s.uuidksinc.net	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.770868063 CET	192.168.2.4	1.1.1.1	0x96ff	Standard query (0)	s.uuidksinc.net	65	IN (0x0001)	false
Jan 1, 2024 00:36:42.772455931 CET	192.168.2.4	1.1.1.1	0xabff	Standard query (0)	match.360yield.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.772716999 CET	192.168.2.4	1.1.1.1	0x9752	Standard query (0)	match.360yield.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:42.920908928 CET	192.168.2.4	1.1.1.1	0x5c64	Standard query (0)	shopnetic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.921188116 CET	192.168.2.4	1.1.1.1	0x2148	Standard query (0)	shopnetic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:43.363214016 CET	192.168.2.4	1.1.1.1	0x32ae	Standard query (0)	sonar.semantiqo.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.363894939 CET	192.168.2.4	1.1.1.1	0x4402	Standard query (0)	sonar.semantiqo.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:43.367080927 CET	192.168.2.4	1.1.1.1	0x5943	Standard query (0)	ssp.adriver.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.367317915 CET	192.168.2.4	1.1.1.1	0xa6e1	Standard query (0)	ssp.adriver.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:43.369860888 CET	192.168.2.4	1.1.1.1	0x3ae4	Standard query (0)	rtb-eu-warsaw.intent.ai	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.370217085 CET	192.168.2.4	1.1.1.1	0xdced	Standard query (0)	rtb-eu-warsaw.intent.ai	65	IN (0x0001)	false
Jan 1, 2024 00:36:43.764897108 CET	192.168.2.4	1.1.1.1	0x6ca	Standard query (0)	tech.rtb.mts.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.765381098 CET	192.168.2.4	1.1.1.1	0xcc92	Standard query (0)	tech.rtb.mts.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:44.528204918 CET	192.168.2.4	1.1.1.1	0xd92c	Standard query (0)	counter.yadro.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:44.528633118 CET	192.168.2.4	1.1.1.1	0xc533	Standard query (0)	counter.yadro.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:44.616889954 CET	192.168.2.4	1.1.1.1	0x18b2	Standard query (0)	ssp.adriver.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:44.617185116 CET	192.168.2.4	1.1.1.1	0xef99	Standard query (0)	ssp.adriver.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:44.982734919 CET	192.168.2.4	1.1.1.1	0x4bfd	Standard query (0)	pixel.konnektu.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:44.983041048 CET	192.168.2.4	1.1.1.1	0xe61a	Standard query (0)	pixel.konnektu.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:45.096674919 CET	192.168.2.4	1.1.1.1	0x8e6	Standard query (0)	sync.bumlam.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.097129107 CET	192.168.2.4	1.1.1.1	0xa66b	Standard query (0)	sync.bumlam.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:45.383788109 CET	192.168.2.4	1.1.1.1	0x3357	Standard query (0)	sync.dmp.otm-r.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.384227037 CET	192.168.2.4	1.1.1.1	0x4762	Standard query (0)	sync.dmp.otm-r.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:45.395996094 CET	192.168.2.4	1.1.1.1	0xb4b8	Standard query (0)	shopnetic.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.399538040 CET	192.168.2.4	1.1.1.1	0x2348	Standard query (0)	shopnetic.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:45.720767021 CET	192.168.2.4	1.1.1.1	0xab21	Standard query (0)	sync.gonet-ads.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.721132040 CET	192.168.2.4	1.1.1.1	0x391e	Standard query (0)	sync.gonet-ads.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:46.206587076 CET	192.168.2.4	1.1.1.1	0x470e	Standard query (0)	sync.upravel.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.206955910 CET	192.168.2.4	1.1.1.1	0xf7bb	Standard query (0)	sync.upravel.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:46.208026886 CET	192.168.2.4	1.1.1.1	0x36e8	Standard query (0)	sync.bumlam.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.208331108 CET	192.168.2.4	1.1.1.1	0x5b00	Standard query (0)	sync.bumlam.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:46.621962070 CET	192.168.2.4	1.1.1.1	0x9c0	Standard query (0)	x01.aidata.io	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.622457027 CET	192.168.2.4	1.1.1.1	0x3e4	Standard query (0)	x01.aidata.io	65	IN (0x0001)	false
Jan 1, 2024 00:36:46.721575022 CET	192.168.2.4	1.1.1.1	0x5fc6	Standard query (0)	yandex-dmp-sync.rutarget.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.722057104 CET	192.168.2.4	1.1.1.1	0x4d82	Standard query (0)	yandex-dmp-sync.rutarget.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:46.723445892 CET	192.168.2.4	1.1.1.1	0xb068	Standard query (0)	sonar.semantiqo.com	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.723608017 CET	192.168.2.4	1.1.1.1	0x198b	Standard query (0)	sonar.semantiqo.com	65	IN (0x0001)	false
Jan 1, 2024 00:36:47.364465952 CET	192.168.2.4	1.1.1.1	0x1ed8	Standard query (0)	yandex-sync.rutarget.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:47.365178108 CET	192.168.2.4	1.1.1.1	0x8519	Standard query (0)	yandex-sync.rutarget.ru	65	IN (0x0001)	false
Jan 1, 2024 00:36:48.487726927 CET	192.168.2.4	1.1.1.1	0x8e63	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:48.488116026 CET	192.168.2.4	1.1.1.1	0x107e	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 1, 2024 00:37:03.223872900 CET	192.168.2.4	1.1.1.1	0xd30f	Standard query (0)	ysa-static.passport.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:37:06.515512943 CET	192.168.2.4	1.1.1.1	0x70db	Standard query (0)	faq-kak.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:37:06.516129017 CET	192.168.2.4	1.1.1.1	0x5e09	Standard query (0)	faq-kak.ru	65	IN (0x0001)	false
Jan 1, 2024 00:37:07.545751095 CET	192.168.2.4	1.1.1.1	0x7a3b	Standard query (0)	faq-kak.ru	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:37:07.546066046 CET	192.168.2.4	1.1.1.1	0x1eb	Standard query (0)	faq-kak.ru	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 1, 2024 00:36:08.891782999 CET	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:08.891782999 CET	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	clients.l.google.com		142.251.116.101	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.891782999 CET	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	clients.l.google.com		142.251.116.100	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.891782999 CET	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	clients.l.google.com		142.251.116.139	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.891782999 CET	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	clients.l.google.com		142.251.116.138	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.891782999 CET	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	clients.l.google.com		142.251.116.113	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.891782999 CET	1.1.1.1	192.168.2.4	0x5fa7	No error (0)	clients.l.google.com		142.251.116.102	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.892431974 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	accounts.google.com		142.250.115.84	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:08.892803907 CET	1.1.1.1	192.168.2.4	0xb147	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:10.726764917 CET	1.1.1.1	192.168.2.4	0xb6f9	No error (0)	faq-kak.ru		86.110.215.66	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.895307064 CET	1.1.1.1	192.168.2.4	0x85fe	No error (0)	www.google.com		142.250.115.104	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.895307064 CET	1.1.1.1	192.168.2.4	0x85fe	No error (0)	www.google.com		142.250.115.147	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.895307064 CET	1.1.1.1	192.168.2.4	0x85fe	No error (0)	www.google.com		142.250.115.106	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.895307064 CET	1.1.1.1	192.168.2.4	0x85fe	No error (0)	www.google.com		142.250.115.105	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.895307064 CET	1.1.1.1	192.168.2.4	0x85fe	No error (0)	www.google.com		142.250.115.99	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.895307064 CET	1.1.1.1	192.168.2.4	0x85fe	No error (0)	www.google.com		142.250.115.103	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:12.895632982 CET	1.1.1.1	192.168.2.4	0xc65c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 1, 2024 00:36:20.075822115 CET	1.1.1.1	192.168.2.4	0x25a2	No error (0)	yandex.ru		5.255.255.77	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.075822115 CET	1.1.1.1	192.168.2.4	0x25a2	No error (0)	yandex.ru		77.88.55.60	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.075822115 CET	1.1.1.1	192.168.2.4	0x25a2	No error (0)	yandex.ru		5.255.255.70	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.075822115 CET	1.1.1.1	192.168.2.4	0x25a2	No error (0)	yandex.ru		77.88.55.88	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.246531010 CET	1.1.1.1	192.168.2.4	0x615a	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.246531010 CET	1.1.1.1	192.168.2.4	0x615a	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.246531010 CET	1.1.1.1	192.168.2.4	0x615a	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.246531010 CET	1.1.1.1	192.168.2.4	0x615a	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.304008961 CET	1.1.1.1	192.168.2.4	0xae18	No error (0)	an.yandex.ru		77.88.21.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.304008961 CET	1.1.1.1	192.168.2.4	0xae18	No error (0)	an.yandex.ru		213.180.193.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.304008961 CET	1.1.1.1	192.168.2.4	0xae18	No error (0)	an.yandex.ru		87.250.250.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.304008961 CET	1.1.1.1	192.168.2.4	0xae18	No error (0)	an.yandex.ru		213.180.204.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:20.304008961 CET	1.1.1.1	192.168.2.4	0xae18	No error (0)	an.yandex.ru		93.158.134.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:22.321923018 CET	1.1.1.1	192.168.2.4	0xdc84	No error (0)	community.akamai.steamstatic.com		23.47.48.97	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:22.321923018 CET	1.1.1.1	192.168.2.4	0xdc84	No error (0)	community.akamai.steamstatic.com		23.47.48.106	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:22.323194981 CET	1.1.1.1	192.168.2.4	0x2347	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:22.323208094 CET	1.1.1.1	192.168.2.4	0x539	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:23.251255035 CET	1.1.1.1	192.168.2.4	0x3d7f	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:23.252299070 CET	1.1.1.1	192.168.2.4	0x65ce	No error (0)	avatars.akamai.steamstatic.com	avatars.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:23.266345978 CET	1.1.1.1	192.168.2.4	0x22d9	No error (0)	community.akamai.steamstatic.com		23.47.52.50	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.266345978 CET	1.1.1.1	192.168.2.4	0x22d9	No error (0)	community.akamai.steamstatic.com		23.47.52.51	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.726300955 CET	1.1.1.1	192.168.2.4	0xfb32	No error (0)	yastatic.net		178.154.131.216	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.726300955 CET	1.1.1.1	192.168.2.4	0xfb32	No error (0)	yastatic.net		178.154.131.217	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.726300955 CET	1.1.1.1	192.168.2.4	0xfb32	No error (0)	yastatic.net		178.154.131.215	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.729068041 CET	1.1.1.1	192.168.2.4	0x613a	No error (0)	avatars.mds.yandex.net		87.250.247.183	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.729068041 CET	1.1.1.1	192.168.2.4	0x613a	No error (0)	avatars.mds.yandex.net		87.250.247.184	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.729068041 CET	1.1.1.1	192.168.2.4	0x613a	No error (0)	avatars.mds.yandex.net		87.250.247.181	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.729068041 CET	1.1.1.1	192.168.2.4	0x613a	No error (0)	avatars.mds.yandex.net		87.250.247.182	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:23.734931946 CET	1.1.1.1	192.168.2.4	0x18d2	No error (0)	ads.adfox.ru		77.88.21.179	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:24.831671000 CET	1.1.1.1	192.168.2.4	0xb9fb	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:24.831671000 CET	1.1.1.1	192.168.2.4	0xb9fb	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:24.831671000 CET	1.1.1.1	192.168.2.4	0xb9fb	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:24.831671000 CET	1.1.1.1	192.168.2.4	0xb9fb	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:24.831671000 CET	1.1.1.1	192.168.2.4	0xb9fb	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:24.832592010 CET	1.1.1.1	192.168.2.4	0xd154	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:26.040762901 CET	1.1.1.1	192.168.2.4	0xbd1b	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:26.040762901 CET	1.1.1.1	192.168.2.4	0xbd1b	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.040762901 CET	1.1.1.1	192.168.2.4	0xbd1b	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.040762901 CET	1.1.1.1	192.168.2.4	0xbd1b	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.040762901 CET	1.1.1.1	192.168.2.4	0xbd1b	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.042417049 CET	1.1.1.1	192.168.2.4	0x3d22	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:26.722172022 CET	1.1.1.1	192.168.2.4	0xfc10	No error (0)	yandex.ru		5.255.255.70	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.722172022 CET	1.1.1.1	192.168.2.4	0xfc10	No error (0)	yandex.ru		77.88.55.60	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.722172022 CET	1.1.1.1	192.168.2.4	0xfc10	No error (0)	yandex.ru		5.255.255.77	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.722172022 CET	1.1.1.1	192.168.2.4	0xfc10	No error (0)	yandex.ru		77.88.55.88	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:26.972620964 CET	1.1.1.1	192.168.2.4	0x5212	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:26.972620964 CET	1.1.1.1	192.168.2.4	0x5212	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:28.089400053 CET	1.1.1.1	192.168.2.4	0xbcd4	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:28.089400053 CET	1.1.1.1	192.168.2.4	0xbcd4	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:28.089400053 CET	1.1.1.1	192.168.2.4	0xbcd4	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:28.089400053 CET	1.1.1.1	192.168.2.4	0xbcd4	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:28.089400053 CET	1.1.1.1	192.168.2.4	0xbcd4	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:28.089509964 CET	1.1.1.1	192.168.2.4	0xe3f7	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:30.225891113 CET	1.1.1.1	192.168.2.4	0xaf1	No error (0)	favicon.yandex.net		213.180.204.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.225891113 CET	1.1.1.1	192.168.2.4	0xaf1	No error (0)	favicon.yandex.net		87.250.250.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.225891113 CET	1.1.1.1	192.168.2.4	0xaf1	No error (0)	favicon.yandex.net		77.88.21.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.225891113 CET	1.1.1.1	192.168.2.4	0xaf1	No error (0)	favicon.yandex.net		93.158.134.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.296487093 CET	1.1.1.1	192.168.2.4	0x8460	No error (0)	yastatic.net		178.154.131.216	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.296487093 CET	1.1.1.1	192.168.2.4	0x8460	No error (0)	yastatic.net		178.154.131.217	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:30.296487093 CET	1.1.1.1	192.168.2.4	0x8460	No error (0)	yastatic.net		178.154.131.215	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.004910946 CET	1.1.1.1	192.168.2.4	0x787	No error (0)	avatars.mds.yandex.net		87.250.247.182	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.004910946 CET	1.1.1.1	192.168.2.4	0x787	No error (0)	avatars.mds.yandex.net		87.250.247.183	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.004910946 CET	1.1.1.1	192.168.2.4	0x787	No error (0)	avatars.mds.yandex.net		87.250.247.181	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.004910946 CET	1.1.1.1	192.168.2.4	0x787	No error (0)	avatars.mds.yandex.net		87.250.247.184	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.911923885 CET	1.1.1.1	192.168.2.4	0x26d2	No error (0)	acint.net		193.3.184.135	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.911923885 CET	1.1.1.1	192.168.2.4	0x26d2	No error (0)	acint.net		193.3.184.7	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.911923885 CET	1.1.1.1	192.168.2.4	0x26d2	No error (0)	acint.net		142.132.138.212	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.911923885 CET	1.1.1.1	192.168.2.4	0x26d2	No error (0)	acint.net		142.132.138.215	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.911923885 CET	1.1.1.1	192.168.2.4	0x26d2	No error (0)	acint.net		142.132.138.214	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.911923885 CET	1.1.1.1	192.168.2.4	0x26d2	No error (0)	acint.net		142.132.138.213	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.911923885 CET	1.1.1.1	192.168.2.4	0x26d2	No error (0)	acint.net		193.3.184.137	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		172.240.127.131	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		172.240.127.128	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		96.46.186.59	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		96.46.186.61	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		172.240.127.130	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		172.240.127.129	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921519995 CET	1.1.1.1	192.168.2.4	0x1ec6	No error (0)	ssp.ads.betweendigital.com		96.46.186.63	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921612978 CET	1.1.1.1	192.168.2.4	0x1257	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921844006 CET	1.1.1.1	192.168.2.4	0x803a	No error (0)	yandex.ru		77.88.55.60	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921844006 CET	1.1.1.1	192.168.2.4	0x803a	No error (0)	yandex.ru		5.255.255.77	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921844006 CET	1.1.1.1	192.168.2.4	0x803a	No error (0)	yandex.ru		77.88.55.88	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.921844006 CET	1.1.1.1	192.168.2.4	0x803a	No error (0)	yandex.ru		5.255.255.70	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.926803112 CET	1.1.1.1	192.168.2.4	0x776	No error (0)	favicon.yandex.net		77.88.21.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.926803112 CET	1.1.1.1	192.168.2.4	0x776	No error (0)	favicon.yandex.net		213.180.204.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.926803112 CET	1.1.1.1	192.168.2.4	0x776	No error (0)	favicon.yandex.net		87.250.250.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.926803112 CET	1.1.1.1	192.168.2.4	0x776	No error (0)	favicon.yandex.net		93.158.134.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:31.944168091 CET	1.1.1.1	192.168.2.4	0x1386	No error (0)	px.arcspire.io		35.177.4.157	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.034164906 CET	1.1.1.1	192.168.2.4	0x1e88	Name error (3)	ysa-static.passport.yandex.ru	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.034492016 CET	1.1.1.1	192.168.2.4	0x9b2	Name error (3)	ysa-static.passport.yandex.ru	none	none	65	IN (0x0001)	false
Jan 1, 2024 00:36:32.157649040 CET	1.1.1.1	192.168.2.4	0x2a44	Name error (3)	ysa-static.passport.yandex.ru	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.180711985 CET	1.1.1.1	192.168.2.4	0xd3c9	No error (0)	an.yandex.ru		87.250.250.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.180711985 CET	1.1.1.1	192.168.2.4	0xd3c9	No error (0)	an.yandex.ru		213.180.204.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.180711985 CET	1.1.1.1	192.168.2.4	0xd3c9	No error (0)	an.yandex.ru		213.180.193.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.180711985 CET	1.1.1.1	192.168.2.4	0xd3c9	No error (0)	an.yandex.ru		77.88.21.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:32.180711985 CET	1.1.1.1	192.168.2.4	0xd3c9	No error (0)	an.yandex.ru		93.158.134.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.089667082 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	an.yandex.ru		213.180.204.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.089667082 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	an.yandex.ru		87.250.250.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.089667082 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	an.yandex.ru		213.180.193.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.089667082 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	an.yandex.ru		77.88.21.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.089667082 CET	1.1.1.1	192.168.2.4	0xffe	No error (0)	an.yandex.ru		93.158.134.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		50.16.134.138	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.20.247.174	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.204.147.138	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.222.25.207	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.22.236.60	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.210.192.164	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.0.150	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.199939966 CET	1.1.1.1	192.168.2.4	0xba1c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.232.87.18	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.200166941 CET	1.1.1.1	192.168.2.4	0x60ad	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:33.200166941 CET	1.1.1.1	192.168.2.4	0x60ad	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:33.200166941 CET	1.1.1.1	192.168.2.4	0x60ad	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:33.247349977 CET	1.1.1.1	192.168.2.4	0x94d6	No error (0)	im.bluevoox.com		52.45.175.185	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.476643085 CET	1.1.1.1	192.168.2.4	0xdafa	No error (0)	cm.g.doubleclick.net		142.250.113.157	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.476643085 CET	1.1.1.1	192.168.2.4	0xdafa	No error (0)	cm.g.doubleclick.net		142.250.113.154	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.476643085 CET	1.1.1.1	192.168.2.4	0xdafa	No error (0)	cm.g.doubleclick.net		142.250.113.156	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.476643085 CET	1.1.1.1	192.168.2.4	0xdafa	No error (0)	cm.g.doubleclick.net		142.250.113.155	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		96.46.186.61	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		172.240.127.131	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		172.240.127.130	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		96.46.186.59	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		96.46.186.63	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		172.240.127.129	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881721973 CET	1.1.1.1	192.168.2.4	0x7f19	No error (0)	ssp.ads.betweendigital.com		172.240.127.128	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:33.881798029 CET	1.1.1.1	192.168.2.4	0xaa0f	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:34.119975090 CET	1.1.1.1	192.168.2.4	0x58c2	No error (0)	cm.g.doubleclick.net		142.250.114.155	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.119975090 CET	1.1.1.1	192.168.2.4	0x58c2	No error (0)	cm.g.doubleclick.net		142.250.114.157	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.119975090 CET	1.1.1.1	192.168.2.4	0x58c2	No error (0)	cm.g.doubleclick.net		142.250.114.154	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.119975090 CET	1.1.1.1	192.168.2.4	0x58c2	No error (0)	cm.g.doubleclick.net		142.250.114.156	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.217	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.214	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.210	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.215	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.218	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.216	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.201	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.213	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.219	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.200	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.211	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.245121956 CET	1.1.1.1	192.168.2.4	0xbb3b	No error (0)	ssp-rtb.sape.ru		193.3.184.212	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643497944 CET	1.1.1.1	192.168.2.4	0x2d04	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643497944 CET	1.1.1.1	192.168.2.4	0x2d04	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643497944 CET	1.1.1.1	192.168.2.4	0x2d04	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.40.168.59	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.89.59.154	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.209.216.17	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		44.235.114.235	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.187.172.209	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.34.144.49	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.212.247.228	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:34.643563032 CET	1.1.1.1	192.168.2.4	0x137d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.161.85.19	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:35.554631948 CET	1.1.1.1	192.168.2.4	0x3165	No error (0)	cm.tns-counter.ru		194.226.130.226	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:35.554631948 CET	1.1.1.1	192.168.2.4	0x3165	No error (0)	cm.tns-counter.ru		194.226.130.229	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:35.554631948 CET	1.1.1.1	192.168.2.4	0x3165	No error (0)	cm.tns-counter.ru		194.226.130.227	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:35.554631948 CET	1.1.1.1	192.168.2.4	0x3165	No error (0)	cm.tns-counter.ru		194.226.130.228	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.116811037 CET	1.1.1.1	192.168.2.4	0x13f8	No error (0)	yandex.digital-services.solutions		144.126.246.116	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.117330074 CET	1.1.1.1	192.168.2.4	0xaf30	No error (0)	ad.mail.ru	r.mail.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:36.117330074 CET	1.1.1.1	192.168.2.4	0xaf30	No error (0)	r.mail.ru		95.163.41.56	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.133562088 CET	1.1.1.1	192.168.2.4	0x87f	No error (0)	dr.yandex.net		93.158.134.242	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.138046980 CET	1.1.1.1	192.168.2.4	0xefbe	No error (0)	cr.frontend.weborama.fr		34.111.129.221	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.264353991 CET	1.1.1.1	192.168.2.4	0x4cb7	No error (0)	ad.mail.ru	r.mail.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:36.407668114 CET	1.1.1.1	192.168.2.4	0x7b8a	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:36.407668114 CET	1.1.1.1	192.168.2.4	0x7b8a	No error (0)	1.cpm.ak-is2.net		173.239.59.72	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.408601046 CET	1.1.1.1	192.168.2.4	0x202f	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:36.409676075 CET	1.1.1.1	192.168.2.4	0x242f	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:36.409676075 CET	1.1.1.1	192.168.2.4	0x242f	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:36.410155058 CET	1.1.1.1	192.168.2.4	0x3824	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:37.348098040 CET	1.1.1.1	192.168.2.4	0x555c	No error (0)	dm.hybrid.ai		37.230.131.16	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.348098040 CET	1.1.1.1	192.168.2.4	0x555c	No error (0)	dm.hybrid.ai		37.230.131.21	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.348098040 CET	1.1.1.1	192.168.2.4	0x555c	No error (0)	dm.hybrid.ai		37.230.131.22	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.349312067 CET	1.1.1.1	192.168.2.4	0x1102	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:37.349312067 CET	1.1.1.1	192.168.2.4	0x1102	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.349754095 CET	1.1.1.1	192.168.2.4	0x69f7	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:37.405774117 CET	1.1.1.1	192.168.2.4	0xb70c	No error (0)	ad.mail.ru	r.mail.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:37.405774117 CET	1.1.1.1	192.168.2.4	0xb70c	No error (0)	r.mail.ru		95.163.41.56	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.586525917 CET	1.1.1.1	192.168.2.4	0x7d70	No error (0)	ad.mail.ru	r.mail.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.145	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.146	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.134	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.130	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.147	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.133	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.132	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.174	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.159	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.158	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.131	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.148	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.157	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.660227060 CET	1.1.1.1	192.168.2.4	0x496a	No error (0)	dmg.digitaltarget.ru		185.15.175.144	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.661118031 CET	1.1.1.1	192.168.2.4	0x81ac	No error (0)	dsp.mpartner.digital		84.38.189.44	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.661118031 CET	1.1.1.1	192.168.2.4	0x81ac	No error (0)	dsp.mpartner.digital		188.68.217.18	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.661118031 CET	1.1.1.1	192.168.2.4	0x81ac	No error (0)	dsp.mpartner.digital		84.38.189.213	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.661118031 CET	1.1.1.1	192.168.2.4	0x81ac	No error (0)	dsp.mpartner.digital		185.151.241.151	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.664570093 CET	1.1.1.1	192.168.2.4	0xd2bb	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:37.664570093 CET	1.1.1.1	192.168.2.4	0xd2bb	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:37.665837049 CET	1.1.1.1	192.168.2.4	0x9477	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		54.229.5.240	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		52.31.236.51	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		52.49.101.133	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		52.210.27.230	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		99.81.117.7	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		34.251.149.17	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		54.170.231.179	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:38.429337978 CET	1.1.1.1	192.168.2.4	0x6ec9	No error (0)	euw-ice.360yield.com		63.34.251.191	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:39.892507076 CET	1.1.1.1	192.168.2.4	0x6c61	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:39.892507076 CET	1.1.1.1	192.168.2.4	0x6c61	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:39.892507076 CET	1.1.1.1	192.168.2.4	0x6c61	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:39.893018961 CET	1.1.1.1	192.168.2.4	0x5ae4	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:39.893018961 CET	1.1.1.1	192.168.2.4	0x5ae4	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:39.997792006 CET	1.1.1.1	192.168.2.4	0x5960	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:39.997792006 CET	1.1.1.1	192.168.2.4	0x5960	No error (0)	1.cpm.ak-is2.net		173.239.59.72	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:39.997812986 CET	1.1.1.1	192.168.2.4	0xb463	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:40.025681019 CET	1.1.1.1	192.168.2.4	0xac2f	No error (0)	kimberlite.io		217.199.220.44	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.025681019 CET	1.1.1.1	192.168.2.4	0xac2f	No error (0)	kimberlite.io		217.199.220.43	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.261251926 CET	1.1.1.1	192.168.2.4	0x8253	No error (0)	eye.targetads.io		51.250.81.61	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.674837112 CET	1.1.1.1	192.168.2.4	0x142b	No error (0)	match.new-programmatic.com		217.65.2.150	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.677491903 CET	1.1.1.1	192.168.2.4	0xf0f8	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:40.677491903 CET	1.1.1.1	192.168.2.4	0xf0f8	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:40.677491903 CET	1.1.1.1	192.168.2.4	0xf0f8	No error (0)	pug-sfo-bc.pubmnet.com		104.36.113.107	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.678055048 CET	1.1.1.1	192.168.2.4	0x38d1	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:40.678055048 CET	1.1.1.1	192.168.2.4	0x38d1	No error (0)	simage2v2.pubmnet.com	pug-sfo-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	nr.bidderstack.com	balancer.bidderstack.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		94.130.221.58	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		167.235.176.63	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		195.201.240.61	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		116.202.32.25	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		162.55.144.211	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		167.235.186.113	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		142.132.211.137	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.916634083 CET	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	balancer.bidderstack.com		167.235.186.124	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:40.917459011 CET	1.1.1.1	192.168.2.4	0x44b1	No error (0)	nr.bidderstack.com	balancer.bidderstack.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:41.096606016 CET	1.1.1.1	192.168.2.4	0x1b91	No error (0)	profile.ssp.rambler.ru		91.192.149.30	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.096606016 CET	1.1.1.1	192.168.2.4	0x1b91	No error (0)	profile.ssp.rambler.ru		91.192.149.14	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.096606016 CET	1.1.1.1	192.168.2.4	0x1b91	No error (0)	profile.ssp.rambler.ru		91.192.150.14	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.096606016 CET	1.1.1.1	192.168.2.4	0x1b91	No error (0)	profile.ssp.rambler.ru		91.192.148.30	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.096606016 CET	1.1.1.1	192.168.2.4	0x1b91	No error (0)	profile.ssp.rambler.ru		91.192.150.30	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.096606016 CET	1.1.1.1	192.168.2.4	0x1b91	No error (0)	profile.ssp.rambler.ru		91.192.148.14	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.463439941 CET	1.1.1.1	192.168.2.4	0x8142	No error (0)	mitdmp.whiteboxdigital.ru		81.163.17.245	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.35	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.39	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.42	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.37	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.38	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.34	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.40	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.41	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:41.521959066 CET	1.1.1.1	192.168.2.4	0xc6d9	No error (0)	sm.rtb.mts.ru		217.66.147.33	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		34.199.149.230	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		3.208.244.62	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		44.197.48.102	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		34.204.145.238	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		34.201.247.205	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		50.19.31.61	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		34.233.88.9	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.127084017 CET	1.1.1.1	192.168.2.4	0xe482	No error (0)	na-ice.360yield.com		100.26.6.110	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.128165960 CET	1.1.1.1	192.168.2.4	0x111c	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:42.128165960 CET	1.1.1.1	192.168.2.4	0x111c	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:42.644886971 CET	1.1.1.1	192.168.2.4	0xe270	No error (0)	rtb-eu-warsaw.intent.ai		172.67.72.191	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.644886971 CET	1.1.1.1	192.168.2.4	0xe270	No error (0)	rtb-eu-warsaw.intent.ai		104.26.14.69	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.644886971 CET	1.1.1.1	192.168.2.4	0xe270	No error (0)	rtb-eu-warsaw.intent.ai		104.26.15.69	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.40	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.35	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.42	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.34	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.41	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.39	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.37	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.36	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.38	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.692934990 CET	1.1.1.1	192.168.2.4	0x1d34	No error (0)	vma.mts.ru		217.66.147.33	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.812045097 CET	1.1.1.1	192.168.2.4	0x87a1	No error (0)	rtb-eu-warsaw.intent.ai			65	IN (0x0001)	false
Jan 1, 2024 00:36:42.892292976 CET	1.1.1.1	192.168.2.4	0x1aa	No error (0)	s.uuidksinc.net		31.220.27.135	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.892292976 CET	1.1.1.1	192.168.2.4	0x1aa	No error (0)	s.uuidksinc.net		31.220.27.155	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.892292976 CET	1.1.1.1	192.168.2.4	0x1aa	No error (0)	s.uuidksinc.net		185.98.54.153	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.892292976 CET	1.1.1.1	192.168.2.4	0x1aa	No error (0)	s.uuidksinc.net		31.220.27.134	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		34.232.60.164	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		3.215.28.117	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		44.221.184.26	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		44.217.95.74	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		54.90.89.241	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		44.205.111.229	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		34.224.205.52	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894012928 CET	1.1.1.1	192.168.2.4	0xabff	No error (0)	na-ice.360yield.com		34.204.145.238	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894687891 CET	1.1.1.1	192.168.2.4	0x9752	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:42.894687891 CET	1.1.1.1	192.168.2.4	0x9752	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:43.233279943 CET	1.1.1.1	192.168.2.4	0x5c64	No error (0)	shopnetic.com		77.244.216.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.486001015 CET	1.1.1.1	192.168.2.4	0x32ae	No error (0)	sonar.semantiqo.com		95.217.109.66	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.488996983 CET	1.1.1.1	192.168.2.4	0x5943	No error (0)	ssp.adriver.ru		81.222.128.216	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.488996983 CET	1.1.1.1	192.168.2.4	0x5943	No error (0)	ssp.adriver.ru		81.222.128.215	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.488996983 CET	1.1.1.1	192.168.2.4	0x5943	No error (0)	ssp.adriver.ru		81.222.128.213	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.488996983 CET	1.1.1.1	192.168.2.4	0x5943	No error (0)	ssp.adriver.ru		81.222.128.214	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.492630005 CET	1.1.1.1	192.168.2.4	0x3ae4	No error (0)	rtb-eu-warsaw.intent.ai		104.26.14.69	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.492630005 CET	1.1.1.1	192.168.2.4	0x3ae4	No error (0)	rtb-eu-warsaw.intent.ai		104.26.15.69	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.492630005 CET	1.1.1.1	192.168.2.4	0x3ae4	No error (0)	rtb-eu-warsaw.intent.ai		172.67.72.191	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:43.493747950 CET	1.1.1.1	192.168.2.4	0xdced	No error (0)	rtb-eu-warsaw.intent.ai			65	IN (0x0001)	false
Jan 1, 2024 00:36:43.889998913 CET	1.1.1.1	192.168.2.4	0x6ca	No error (0)	tech.rtb.mts.ru		213.87.44.187	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:44.650444984 CET	1.1.1.1	192.168.2.4	0xd92c	No error (0)	counter.yadro.ru		88.212.202.52	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:44.650444984 CET	1.1.1.1	192.168.2.4	0xd92c	No error (0)	counter.yadro.ru		88.212.201.204	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:44.650444984 CET	1.1.1.1	192.168.2.4	0xd92c	No error (0)	counter.yadro.ru		88.212.201.198	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.125245094 CET	1.1.1.1	192.168.2.4	0x18b2	No error (0)	ssp.adriver.ru		81.222.128.216	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.125245094 CET	1.1.1.1	192.168.2.4	0x18b2	No error (0)	ssp.adriver.ru		81.222.128.213	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.125245094 CET	1.1.1.1	192.168.2.4	0x18b2	No error (0)	ssp.adriver.ru		81.222.128.214	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.125245094 CET	1.1.1.1	192.168.2.4	0x18b2	No error (0)	ssp.adriver.ru		81.222.128.215	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.218874931 CET	1.1.1.1	192.168.2.4	0x8e6	No error (0)	sync.bumlam.com		31.172.81.160	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.218874931 CET	1.1.1.1	192.168.2.4	0x8e6	No error (0)	sync.bumlam.com		31.172.81.159	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.218874931 CET	1.1.1.1	192.168.2.4	0x8e6	No error (0)	sync.bumlam.com		31.172.81.158	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.218874931 CET	1.1.1.1	192.168.2.4	0x8e6	No error (0)	sync.bumlam.com		31.172.81.172	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.508641958 CET	1.1.1.1	192.168.2.4	0x4762	No error (0)	sync.dmp.otm-r.com	ad-eu.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:45.520013094 CET	1.1.1.1	192.168.2.4	0xb4b8	No error (0)	shopnetic.com		77.244.216.90	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.659219980 CET	1.1.1.1	192.168.2.4	0x4bfd	No error (0)	pixel.konnektu.ru		130.193.58.13	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.844652891 CET	1.1.1.1	192.168.2.4	0xab21	No error (0)	sync.gonet-ads.com		188.42.105.236	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:45.844652891 CET	1.1.1.1	192.168.2.4	0xab21	No error (0)	sync.gonet-ads.com		188.42.105.220	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	sync.upravel.com	prod-hzeu-lba.upravel.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		213.239.194.43	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		46.4.61.188	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		178.63.75.168	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		46.4.62.171	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		176.9.8.252	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		144.76.138.28	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		148.251.236.115	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		148.251.237.106	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		148.251.236.118	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		148.251.129.43	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		88.198.16.238	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		46.4.61.163	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		136.243.48.22	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		138.201.192.161	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		148.251.78.49	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		46.4.53.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		78.46.16.13	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.328624010 CET	1.1.1.1	192.168.2.4	0x470e	No error (0)	prod-hzeu-lba.upravel.com		167.235.180.122	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.329777956 CET	1.1.1.1	192.168.2.4	0x36e8	No error (0)	sync.bumlam.com		31.172.81.172	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.329777956 CET	1.1.1.1	192.168.2.4	0x36e8	No error (0)	sync.bumlam.com		31.172.81.160	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.329777956 CET	1.1.1.1	192.168.2.4	0x36e8	No error (0)	sync.bumlam.com		31.172.81.158	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.329777956 CET	1.1.1.1	192.168.2.4	0x36e8	No error (0)	sync.bumlam.com		31.172.81.159	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.744812012 CET	1.1.1.1	192.168.2.4	0x9c0	No error (0)	x01.aidata.io		89.108.119.28	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.744812012 CET	1.1.1.1	192.168.2.4	0x9c0	No error (0)	x01.aidata.io		89.108.120.76	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.744812012 CET	1.1.1.1	192.168.2.4	0x9c0	No error (0)	x01.aidata.io		89.108.120.68	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.744812012 CET	1.1.1.1	192.168.2.4	0x9c0	No error (0)	x01.aidata.io		89.108.119.43	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:46.847465038 CET	1.1.1.1	192.168.2.4	0x4d82	No error (0)	yandex-dmp-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:46.847465038 CET	1.1.1.1	192.168.2.4	0x4d82	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:46.847496033 CET	1.1.1.1	192.168.2.4	0xb068	No error (0)	sonar.semantiqo.com		95.217.109.66	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:47.489342928 CET	1.1.1.1	192.168.2.4	0x8519	No error (0)	yandex-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:47.489342928 CET	1.1.1.1	192.168.2.4	0x8519	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Jan 1, 2024 00:36:48.609564066 CET	1.1.1.1	192.168.2.4	0x8e63	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:48.609564066 CET	1.1.1.1	192.168.2.4	0x8e63	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:48.609564066 CET	1.1.1.1	192.168.2.4	0x8e63	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:36:48.609564066 CET	1.1.1.1	192.168.2.4	0x8e63	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:37:03.345998049 CET	1.1.1.1	192.168.2.4	0xd30f	Name error (3)	ysa-static.passport.yandex.ru	none	none	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:37:07.984519005 CET	1.1.1.1	192.168.2.4	0x70db	No error (0)	faq-kak.ru		86.110.215.66	A (IP address)	IN (0x0001)	false
Jan 1, 2024 00:37:08.218672991 CET	1.1.1.1	192.168.2.4	0x7a3b	No error (0)	faq-kak.ru		86.110.215.66	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	142.251.116.101	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:09 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:09 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-9V8khberisaslFDuOf8R9w' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sun, 31 Dec 2023 23:36:09 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6208 X-Daystart: 56169 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-31 23:36:09 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 30 38 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 36 31 36 39 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6208" elapsed_seconds="56169"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-12-31 23:36:09 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-12-31 23:36:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	142.250.115.84	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:09 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2023-12-31 23:36:09 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-12-31 23:36:09 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sun, 31 Dec 2023 23:36:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-vpZ8Cyq2QQrD_QzTZgmGtQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-12-31 23:36:09 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-12-31 23:36:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:11 UTC	688	OUT	GET /kak-najti-svoyu-biblioteku-v-steam/ HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:13 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-UA-Compatible: IE=edge Link: <https://faq-kak.ru/wp-json/>; rel="https://api.w.org/" Link: <https://faq-kak.ru/wp-json/wp/v2/posts/112659>; rel="alternate"; type="application/json" Vary: Accept-Encoding
2023-12-31 23:36:13 UTC	16001	IN	Data Raw: 66 65 39 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 72 75 2d 52 55 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 71 2d 6b 61 6b 2e 72 75 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 Data Ascii: fe9b<!DOCTYPE html><html class="html" lang="ru-RU" prefix="og: https://ogp.me/ns#"><head><meta charset="UTF-8"><link rel="profile" href="https://gmpg.org/xfn/11"><link rel="pingback" href="https://faq-kak.ru/xmlrpc.php"><meta name="viewport" c
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d Data Ascii: kground-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 2d 6c 69 22 20 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 71 2d 6b 61 6b 2e 72 75 2f 23 22 20 63 6c 61 73 73 3d 22 73 69 74 65 2d 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 20 73 65 61 72 63 68 2d 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 22 3e d0 9f d0 b5 d1 80 d0 b5 d0 ba d0 bb d1 8e d1 87 d0 b8 d1 82 d1 8c 20 d0 bf d0 be d0 b8 d1 81 d0 ba 20 d0 bf d0 be 20 d0 b2 d0 b5 d0 b1 2d d1 81 d0 b0 d0 b9 d1 82 d1 83 3c 2f 73 70 61 6e 3e 3c 69 20 63 6c 61 73 73 3d 22 20 69 63 6f 6e 2d 6d 61 67 6e 69 66 69 65 72 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 Data Ascii: class="search-toggle-li" ><a href="https://faq-kak.ru/#" class="site-search-toggle search-dropdown-toggle"><span class="screen-reader-text"> -</span><i class=" icon-magnifier" aria-hidden="true" role="
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 38 66 63 35 35 63 37 66 37 35 62 38 64 38 39 30 32 37 65 30 36 64 39 30 39 37 62 33 66 62 37 31 37 39 30 32 36 61 30 63 2e 6a 70 67 22 20 2f 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 6d 67 20 64 65 63 6f 64 69 6e 67 3d 22 61 73 79 6e 63 22 20 6f 6e 45 72 72 6f 72 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 20 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 3d 20 77 69 6e 64 6f 77 2e 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 20 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 28 74 68 69 73 29 3b 22 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 38 66 63 35 35 63 37 66 37 35 Data Ascii: eamstatic.com/8fc55c7f75b8d89027e06d9097b3fb7179026a0c.jpg" /><noscript><img decoding="async" onError="javascript: wp_broken_images = window.wp_broken_images \|\| function(){}; wp_broken_images(this);" src="https://avatars.akamai.steamstatic.com/8fc55c7f75
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 20 d0 b2 d0 b5 d1 80 d0 bd d1 83 d1 82 d1 8c d1 81 d1 8f 20 d0 b2 20 d0 b8 d0 b3 d1 80 d1 83 2e 0d 0a 31 35 63 62 33 0d 0a 3c 2f 70 3e 0a 3c 70 3e 0a d0 90 d0 ba d1 82 d0 b8 d0 b2 d0 bd d0 be d1 81 d1 82 d1 8c 20 d0 b4 d1 80 d1 83 d0 b7 d0 b5 d0 b9 0a 3c 2f 70 3e 0a 3c 70 3e d0 a5 d0 be d1 82 d0 b8 d1 82 d0 b5 20 d0 bf d0 be d0 be d0 b1 d1 89 d0 b0 d1 82 d1 8c d1 81 d1 8f 3f 20 d0 9f d0 be d1 81 d0 bc d0 be d1 82 d1 80 d0 b8 d1 82 d0 b5 2c 20 d1 87 d0 b5 d0 bc 20 d0 b7 d0 b0 d0 bd d0 b8 d0 bc d0 b0 d1 8e d1 82 d1 81 d1 8f 20 d0 b2 d0 b0 d1 88 d0 b8 20 d0 b4 d1 80 d1 83 d0 b7 d1 8c d1 8f 20 d0 b8 20 d0 ba d0 b0 d0 ba d0 b8 d0 b5 20 d0 b8 d0 b3 d1 80 d1 8b 20 d0 b8 d0 bc 20 d0 b8 d0 bd d1 82 d0 b5 d1 80 d0 b5 d1 81 d0 bd d1 8b 2e 20 d0 92 d0 be d0 b7 d0 bc Data Ascii: .15cb3</p><p> </p><p> ? , .
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: b7 d0 bb d0 b8 d1 87 d0 bd d1 8b d0 b5 20 d1 83 d1 82 d0 b8 d0 bb d0 b8 d1 82 d1 8b 20 d0 b4 d0 bb d1 8f 20 53 74 65 61 6d 2c 20 d0 ba d0 be d0 b5 d0 b9 20 d0 b8 20 d1 81 d1 82 d0 b0 d0 bb d0 b0 20 53 74 65 61 6d 20 4c 69 62 72 61 72 79 20 4d 61 6e 61 67 65 72 2e 3c 2f 70 3e 0a 3c 70 3e d0 a0 d0 b0 d1 81 d1 81 d0 bc d0 be d1 82 d1 80 d0 b8 d0 bc 20 d0 bf d1 80 d0 be d0 b3 d1 80 d0 b0 d0 bc d0 bc d1 83 3a 20 3c 2f 70 3e 0a 3c 70 3e 3c 69 6d 67 20 64 65 63 6f 64 69 6e 67 3d 22 61 73 79 6e 63 22 20 6f 6e 45 72 72 6f 72 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 20 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 3d 20 77 69 6e 64 6f 77 2e 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 20 77 70 5f 62 72 6f 6b Data Ascii: Steam, Steam Library Manager.</p><p> : </p><p><img decoding="async" onError="javascript: wp_broken_images = window.wp_broken_images \|\| function(){}; wp_brok
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 61 67 65 73 20 3d 20 77 69 6e 64 6f 77 2e 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 20 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 28 74 68 69 73 29 3b 22 20 20 77 69 64 74 68 3d 22 39 30 30 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 77 69 6e 64 6f 77 73 72 65 70 6f 72 74 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 32 2f 30 31 2f 55 6e 74 69 74 6c 65 64 2d 64 65 73 69 67 6e 2d 32 30 32 32 2d 30 31 2d 32 38 54 31 32 31 36 35 34 2e 33 38 37 2d 31 2d 31 2d 31 2e 70 6e 67 22 20 61 6c 74 20 2f 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 6c 69 3e 0a 3c 6c 69 3e 43 6c 69 63 6b 20 74 68 65 20 3c 73 74 72 6f 6e 67 3e Data Ascii: ages = window.wp_broken_images \|\| function(){}; wp_broken_images(this);" width="900" height="500" src="https://cdn.windowsreport.com/wp-content/uploads/2022/01/Untitled-design-2022-01-28T121654.387-1-1-1.png" alt /></noscript></li><li>Click the <strong>
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 20 20 20 20 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 2c 20 74 29 3b 0d 0a 20 20 20 20 7d 29 28 74 68 69 73 2c 20 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2c 20 22 79 61 6e 64 65 78 43 6f 6e 74 65 78 74 41 73 79 6e 63 43 61 6c 6c 62 61 63 6b 73 22 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 20 3c 21 2d 2d 20 65 6e 64 20 57 50 20 51 55 41 44 53 20 2d 2d 3e 20 0a 0a 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 3e 0a 3c 70 3e 3c 69 6d 67 20 64 65 63 6f 64 69 6e 67 3d 22 61 73 79 6e 63 22 20 6f 6e 45 72 72 6f 72 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 20 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 3d 20 77 69 6e 64 6f 77 2e 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 20 Data Ascii: t.parentNode.insertBefore(s, t); })(this, this.document, "yandexContextAsyncCallbacks");</script> ... end WP QUADS --> </div><div><p><img decoding="async" onError="javascript: wp_broken_images = window.wp_broken_images \|\| function(){};
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 78 20 30 70 78 3b 22 3e 0a 0a 20 3c 21 2d 2d 20 57 50 20 51 55 41 44 53 20 2d 20 51 75 69 63 6b 20 41 64 53 65 6e 73 65 20 52 65 6c 6f 61 64 65 64 20 76 2e 32 2e 30 2e 37 39 2e 31 20 43 6f 6e 74 65 6e 74 20 59 61 6e 64 65 78 20 61 73 79 6e 63 20 2d 2d 3e 20 0a 0a 3c 64 69 76 20 69 64 3d 22 79 61 6e 64 65 78 5f 72 74 62 5f 52 2d 41 2d 33 37 39 37 39 30 37 2d 32 22 20 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 2c 20 64 2c 20 6e 2c 20 73 2c 20 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 5b 6e 5d 20 3d 20 77 5b 6e 5d 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 20 20 20 20 20 Data Ascii: x 0px;"> ... WP QUADS - Quick AdSense Reloaded v.2.0.79.1 Content Yandex async --> <div id="yandex_rtb_R-A-3797907-2" ></div> <script type="text/javascript"> (function(w, d, n, s, t) { w[n] = w[n] \|\| [];
2023-12-31 23:36:14 UTC	7395	IN	Data Raw: 80 94 20 d0 a1 d0 b0 d0 b9 d1 82 2c 20 d0 b3 d0 b4 d0 b5 20 d0 b2 d1 8b 20 d1 81 d0 bc d0 be d0 b6 d0 b5 d1 82 d0 b5 20 d1 80 d0 b5 d1 88 d0 b8 d1 82 d1 8c 20 d1 81 d0 b2 d0 be d0 b8 20 d0 b2 d0 be d0 bf d1 80 d0 be d1 81 d1 8b 2e 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 63 6f 70 79 72 69 67 68 74 20 2d 2d 3e 0a 0a 09 09 09 0a 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 66 6f 6f 74 65 72 2d 62 6f 74 74 6f 6d 2d 69 6e 6e 65 72 20 2d 2d 3e 0a 0a 09 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 66 6f 6f 74 65 72 2d 62 6f 74 74 6f 6d 20 2d 2d 3e 0a 0a 0a 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 20 2d 2d 3e 0a 0a 09 0a 3c 2f 66 6f 6f 74 65 72 3e 3c 21 2d 2d 20 23 66 6f 6f 74 65 72 20 2d 2d 3e 0a 0d 0a 09 0d 0a 09 0d 0a 3c 2f 64 69 76 Data Ascii: , .</div>... #copyright --></div>... #footer-bottom-inner --></div>... #footer-bottom --></div>... #footer-inner --></footer>... #footer --></div

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49734	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:13 UTC	602	OUT	GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:13 UTC	316	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:13 GMT Content-Type: text/css Content-Length: 110035 Last-Modified: Tue, 07 Nov 2023 23:15:35 GMT Connection: close ETag: "654ac517-1add3" Expires: Mon, 01 Jan 2024 23:36:13 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:13 UTC	16068	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2023-12-31 23:36:13 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b Data Ascii: kground-dim-70:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-70 .wp-block-cover__background,.wp-block-cover.has-background-dim.has-background-dim-70 .wp-block-cover__gradient-background,.wp-block-cover.has-back
2023-12-31 23:36:14 UTC	16384	IN	Data Raw: 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a Data Ascii: gallery-image:nth-of-type(2n),.blocks-gallery-grid:not(.has-nested-images) .blocks-gallery-item:nth-of-type(2n),.wp-block-gallery:not(.has-nested-images) .blocks-gallery-image:nth-of-type(2n),.wp-block-gallery:not(.has-nested-images) .blocks-gallery-item:
2023-12-31 23:36:14 UTC	16384	IN	Data Raw: 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 2e 68 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 5d 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 5d 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 62 6f 74 74 6f Data Ascii: }.wp-block-image :where(.has-border-color){border-style:solid}.wp-block-image :where([style=border-top-color]){border-top-style:solid}.wp-block-image :where([style=border-right-color]){border-right-style:solid}.wp-block-image :where([style*=border-botto
2023-12-31 23:36:14 UTC	16384	IN	Data Raw: 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 64 69 61 6c 6f 67 7b 67 61 70 3a 69 6e 68 65 72 69 74 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 20 61 3a 6e 6f 74 28 2e 77 70 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 29 29 2c 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 20 2e 77 70 2d 62 6c 6f 63 6b Data Ascii: ner,.wp-block-navigation__responsive-container-content,.wp-block-navigation__responsive-dialog{gap:inherit}:where(.wp-block-navigation.has-background .wp-block-navigation-item a:not(.wp-element-button)),:where(.wp-block-navigation.has-background .wp-block
2023-12-31 23:36:14 UTC	16384	IN	Data Raw: 72 6f 77 2d 70 72 65 76 69 6f 75 73 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 6e 65 78 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 5f 5f 61 72 72 6f 77 2d 6e 65 78 74 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d Data Ascii: row-previous:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-next{display:inline-block;margin-left:1ch}.wp-block-post-navigation-link .wp-block-post-navigation-link__arrow-next:not(.is-arrow-
2023-12-31 23:36:14 UTC	12047	IN	Data Raw: 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 72 69 62 62 62 6c 65 7b 63 6f 6c 6f 72 3a 23 65 39 34 63 38 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 64 72 6f 70 62 6f 78 7b 63 6f 6c 6f 72 3a 23 34 32 38 30 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 65 74 73 79 7b 63 6f 6c 6f 72 3a 23 66 34 35 38 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 2e 69 73 2d Data Ascii: cial-links.is-style-logos-only .wp-social-link-dribbble{color:#e94c89}.wp-block-social-links.is-style-logos-only .wp-social-link-dropbox{color:#4280ff}.wp-block-social-links.is-style-logos-only .wp-social-link-etsy{color:#f45800}.wp-block-social-links.is-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	173.223.108.114	443

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-31 23:36:13 UTC	495	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=235249 Date: Sun, 31 Dec 2023 23:36:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49739	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:13 UTC	642	OUT	GET /wp-content/plugins/quick-adsense-reloaded/includes/gutenberg/dist/blocks.style.build.css HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:14 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:14 GMT Content-Type: text/css Content-Length: 173 Last-Modified: Tue, 26 Dec 2023 21:04:44 GMT Connection: close ETag: "658b3fec-ad" Expires: Mon, 01 Jan 2024 23:36:14 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:14 UTC	173	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 23 2e 23 20 43 6f 6d 6d 6f 6e 20 53 43 53 53 0a 20 2a 0a 20 2a 20 43 61 6e 20 69 6e 63 6c 75 64 65 20 74 68 69 6e 67 73 20 6c 69 6b 65 20 76 61 72 69 61 62 6c 65 73 20 61 6e 64 20 6d 69 78 69 6e 73 0a 20 2a 20 74 68 61 74 20 61 72 65 20 75 73 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 70 72 6f 6a 65 63 74 2e 0a 2a 2f 0a 2f 2a 2a 0a 20 2a 20 23 2e 23 20 53 74 79 6c 65 73 0a 20 2a 0a 20 2a 20 43 53 53 20 66 6f 72 20 62 6f 74 68 20 46 72 6f 6e 74 65 6e 64 2b 42 61 63 6b 65 6e 64 2e 0a 20 2a 2f 0a Data Ascii: /** * #.# Common SCSS * * Can include things like variables and mixins * that are used across the project.//* * #.# Styles * * CSS for both Frontend+Backend. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49740	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:13 UTC	611	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:14 UTC	312	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:14 GMT Content-Type: text/css Content-Length: 2894 Last-Modified: Tue, 26 Dec 2023 21:04:55 GMT Connection: close ETag: "658b3ff7-b4e" Expires: Mon, 01 Jan 2024 23:36:14 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:14 UTC	2894	IN	Data Raw: 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d 72 65 73 70 6f Data Ascii: .wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-respo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:13 UTC	620	OUT	GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:14 UTC	314	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:14 GMT Content-Type: text/css Content-Length: 59344 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-e7d0" Expires: Mon, 01 Jan 2024 23:36:14 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:14 UTC	16070	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 35 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 Data Ascii: /! Font Awesome Free 5.15.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webki
2023-12-31 23:36:14 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 33 38 64 22 7d 2e 66 61 2d 64 2d 61 6e 64 2d 64 2d 62 65 79 6f 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 61 22 7d 2e 66 61 2d 64 61 69 6c 79 6d 6f 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 32 22 7d 2e 66 61 2d 64 61 73 68 63 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 31 30 22 7d 2e 66 61 2d 64 61 74 61 62 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 63 30 22 7d 2e 66 61 2d 64 65 61 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 61 34 22 7d 2e 66 61 2d 64 65 65 7a 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 66 61 2d 64 65 6c 69 63 69 6f 75 73 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ntent:"\f38d"}.fa-d-and-d-beyond:before{content:"\f6ca"}.fa-dailymotion:before{content:"\e052"}.fa-dashcube:before{content:"\f210"}.fa-database:before{content:"\f1c0"}.fa-deaf:before{content:"\f2a4"}.fa-deezer:before{content:"\e077"}.fa-delicious:before{c
2023-12-31 23:36:15 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 6f 63 61 74 69 6f 6e 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 34 22 7d 2e 66 61 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 6c 6f 63 6b 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 63 31 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 61 6c 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 30 39 22 7d 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 61 6c 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 30 61 22 7d 2e 66 Data Ascii: tent:"\f0cb"}.fa-list-ul:before{content:"\f0ca"}.fa-location-arrow:before{content:"\f124"}.fa-lock:before{content:"\f023"}.fa-lock-open:before{content:"\f3c1"}.fa-long-arrow-alt-down:before{content:"\f309"}.fa-long-arrow-alt-left:before{content:"\f30a"}.f
2023-12-31 23:36:15 UTC	10506	IN	Data Raw: 61 2d 73 77 61 74 63 68 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 33 22 7d 2e 66 61 2d 73 77 69 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 65 31 22 7d 2e 66 61 2d 73 77 69 6d 6d 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 34 22 7d 2e 66 61 2d 73 77 69 6d 6d 69 6e 67 2d 70 6f 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 63 35 22 7d 2e 66 61 2d 73 79 6d 66 6f 6e 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 33 64 22 7d 2e 66 61 2d 73 79 6e 61 67 6f 67 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 39 62 22 7d 2e 66 61 2d 73 79 6e 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 31 22 7d 2e 66 61 2d 73 79 Data Ascii: a-swatchbook:before{content:"\f5c3"}.fa-swift:before{content:"\f8e1"}.fa-swimmer:before{content:"\f5c4"}.fa-swimming-pool:before{content:"\f5c5"}.fa-symfony:before{content:"\f83d"}.fa-synagogue:before{content:"\f69b"}.fa-sync:before{content:"\f021"}.fa-sy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49741	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:13 UTC	622	OUT	GET /wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:14 UTC	314	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:14 GMT Content-Type: text/css Content-Length: 10927 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-2aaf" Expires: Mon, 01 Jan 2024 23:36:14 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:14 UTC	10927	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 73 69 6d 70 6c 65 2d 6c 69 6e 65 2d 69 63 6f 6e 73 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 66 6f 6e 74 73 2f 73 69 6d 70 6c 65 2d 6c 69 6e 65 2d 69 63 6f 6e 73 2f 53 69 6d 70 6c 65 2d 4c 69 6e 65 2d 49 63 6f 6e 73 2e 65 6f 74 3f 76 3d 32 2e 34 2e 30 27 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 66 6f 6e 74 73 2f 73 69 6d 70 6c 65 2d 6c 69 6e 65 2d 69 63 6f 6e 73 2f 53 69 6d 70 6c 65 2d 4c 69 6e 65 2d 49 63 6f 6e 73 2e 65 6f 74 3f 76 3d 32 2e 34 2e 30 23 69 65 66 69 78 27 29 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 66 6f 6e 74 73 2f 73 69 6d 70 6c 65 2d 6c 69 6e 65 2d 69 63 6f 6e 73 2f 53 69 Data Ascii: @font-face{font-family:'simple-line-icons';src:url('../../fonts/simple-line-icons/Simple-Line-Icons.eot?v=2.4.0');src:url('../../fonts/simple-line-icons/Simple-Line-Icons.eot?v=2.4.0#iefix')format('embedded-opentype'),url('../../fonts/simple-line-icons/Si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49744	173.223.108.114	443

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-12-31 23:36:14 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=235258 Date: Sun, 31 Dec 2023 23:36:14 GMT Content-Length: 55 Connection: close X-CID: 2
2023-12-31 23:36:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49745	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:14 UTC	604	OUT	GET /wp-content/themes/oceanwp/assets/css/style.min.css HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:16 UTC	316	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:15 GMT Content-Type: text/css Content-Length: 178440 Last-Modified: Fri, 10 Nov 2023 11:52:10 GMT Connection: close ETag: "654e196a-2b908" Expires: Mon, 01 Jan 2024 23:36:15 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:16 UTC	16068	IN	Data Raw: ef bb bf 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 61 70 70 6c 65 74 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 64 65 6c 2c 64 66 6e 2c 65 6d 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 62 2c 75 2c 69 2c 63 65 6e 74 65 72 2c 64 6c 2c 64 74 2c 64 64 2c 6f 6c 2c 75 6c 2c 6c 69 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 74 61 62 6c 65 2c 63 61 70 74 69 6f 6e 2c 74 Data Ascii: html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,t
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 6f 70 2d 62 61 72 2d 73 6f 63 69 61 6c 2e 74 6f 70 2d 62 61 72 2d 6c 65 66 74 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 63 6f 6c 3a 6e 6f 74 28 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 29 2c 2e 62 6c 6f 67 2d 65 6e 74 72 79 7b 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 7b 2e 62 6f 78 65 64 2d 6c 61 79 6f 75 74 20 23 77 72 61 70 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 7d 66 69 67 75 72 65 3e 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 Data Ascii: op-bar-social.top-bar-left{left:auto}.col:not(.swiper-slide),.blog-entry{width:100% !important;margin-bottom:25px}}@media only screen and (max-width: 480px){.boxed-layout #wrap .container{padding-left:20px;padding-right:20px}}figure>img{display:block;marg
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 72 2d 73 68 6f 72 74 63 6f 64 65 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 74 6f 70 2d 62 61 72 2d 6c 65 66 74 20 2e 70 6f 6c 79 6c 61 6e 67 2d 73 77 69 74 63 68 65 72 2d 73 68 6f 72 74 63 6f 64 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 23 74 6f 70 2d 62 61 72 2d 63 6f 6e 74 65 6e 74 2c 23 74 6f 70 2d 62 61 72 2d 73 6f 63 69 61 6c 2d 61 6c 74 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 74 6f 70 2d 62 61 72 20 23 6c 61 6e 67 5f 73 Data Ascii: r-shortcode{float:right;margin:0;margin-left:20px}.top-bar-left .polylang-switcher-shortcode{float:left;margin:0;margin-right:20px}@media only screen and (max-width: 767px){#top-bar-content,#top-bar-social-alt{float:none;text-align:center}#top-bar #lang_s
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 65 61 72 63 68 2d 74 6f 67 67 6c 65 2d 6c 69 20 2e 73 65 61 72 63 68 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 63 75 72 73 6f 72 3a 74 65 78 74 3b 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 2e 35 3b 2d 77 65 62 6b 69 74 2d 6f 70 61 63 69 74 79 3a 2e 35 3b 6f 70 61 63 69 74 79 3a 2e 35 3b 7a 2d 69 6e 64 65 78 3a 31 7d 23 73 69 74 65 2d 68 65 61 64 65 72 2e 66 75 6c 6c 5f 73 63 72 65 65 6e 2d 68 65 61 64 65 72 20 2e 66 73 2d 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3e 6c 69 2e 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 2d 6c 69 20 2e 73 65 61 72 63 68 2d 74 65 78 74 20 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c Data Ascii: earch-toggle-li .search-text{display:block;position:absolute;top:0;bottom:0;left:0;right:0;cursor:text;-moz-opacity:.5;-webkit-opacity:.5;opacity:.5;z-index:1}#site-header.full_screen-header .fs-dropdown-menu>li.search-toggle-li .search-text i{display:inl
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 2d 73 6f 63 69 61 6c 7b 72 69 67 68 74 3a 61 75 74 6f 7d 23 73 69 74 65 2d 68 65 61 64 65 72 2e 76 65 72 74 69 63 61 6c 2d 68 65 61 64 65 72 20 2e 6f 63 65 61 6e 77 70 2d 73 6f 63 69 61 6c 2d 6d 65 6e 75 20 2e 73 6f 63 69 61 6c 2d 6d 65 6e 75 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 23 73 69 74 65 2d 68 65 61 64 65 72 2e 76 65 72 74 69 63 61 6c 2d 68 65 61 64 65 72 20 2e 63 75 73 74 6f 6d 2d 68 65 61 64 65 72 2d 6e 61 76 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 77 72 61 70 20 23 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 73 69 74 65 2d 68 65 61 64 65 72 2e 76 65 72 74 69 63 61 6c 2d 68 65 61 64 65 72 20 2e 63 75 73 74 6f 6d 2d 68 65 61 Data Ascii: -social{right:auto}#site-header.vertical-header .oceanwp-social-menu .social-menu-inner{display:block;height:auto}#site-header.vertical-header .custom-header-nav #site-navigation-wrap #site-navigation{display:block}#site-header.vertical-header .custom-hea
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 6c 6f 72 65 64 20 75 6c 20 6c 69 2e 6f 63 65 61 6e 77 70 2d 74 69 6b 74 6f 6b 20 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 6f 63 65 61 6e 77 70 2d 73 6f 63 69 61 6c 2d 6d 65 6e 75 20 2e 63 6f 6c 6f 72 65 64 20 75 6c 20 6c 69 2e 6f 63 65 61 6e 77 70 2d 74 69 6b 74 6f 6b 20 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 34 31 34 31 34 7d 2e 6f 63 65 61 6e 77 70 2d 73 6f 63 69 61 6c 2d 6d 65 6e 75 20 2e 63 6f 6c 6f 72 65 64 20 75 6c 20 6c 69 2e 6f 63 65 61 6e 77 70 2d 6d 65 64 69 75 6d 20 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 61 62 36 63 7d 2e 6f 63 65 61 6e 77 70 2d 73 6f 63 69 61 6c 2d 6d 65 6e 75 20 2e 63 6f 6c 6f 72 65 64 20 75 6c 20 6c 69 2e 6f 63 65 61 6e 77 Data Ascii: lored ul li.oceanwp-tiktok a{background-color:#000}.oceanwp-social-menu .colored ul li.oceanwp-tiktok a:hover{background-color:#141414}.oceanwp-social-menu .colored ul li.oceanwp-medium a{background-color:#00ab6c}.oceanwp-social-menu .colored ul li.oceanw
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 33 61 66 66 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 2d 6f 75 74 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 2d 6f 75 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 35 73 20 65 61 73 65 2d 6f 75 74 3b 2d 77 65 62 6b 69 Data Ascii: absolute;left:0;width:100%;height:2px;background-color:#13aff0;content:"";opacity:0;-webkit-transition:all .25s ease-out;-moz-transition:all .25s ease-out;-ms-transition:all .25s ease-out;-o-transition:all .25s ease-out;transition:all .25s ease-out;-webki
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 62 69 6c 65 2d 66 75 6c 6c 73 63 72 65 65 6e 20 61 2e 63 6c 6f 73 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 34 70 78 3b 72 69 67 68 74 3a 31 34 70 78 7d 23 6d 6f 62 69 6c 65 2d 66 75 6c 6c 73 63 72 65 65 6e 20 61 2e 63 6c 6f 73 65 20 2e 63 6c 6f 73 65 2d 69 63 6f 6e 2d 77 72 61 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 Data Ascii: bile-fullscreen a.close{position:absolute;top:14px;right:14px}#mobile-fullscreen a.close .close-icon-wrap{display:inline-block;position:relative;width:40px;height:40px;line-height:33px;-webkit-transition:opacity .15s linear;-moz-transition:opacity .15s li
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 20 75 6c 2e 6f 73 70 6d 2d 64 65 66 61 75 6c 74 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2d 22 7d 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 20 75 6c 2e 6f 73 70 6d 2d 6d 6f 64 65 72 6e 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 7c 22 7d 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 20 75 6c 2e 6f 73 70 6d 2d 73 74 79 6c 69 73 68 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2f 2f 22 7d 2e 73 69 6e 67 6c 65 2d 70 6f 73 74 20 75 6c 2e 6f 73 70 6d 2d 6e 6f 6e 65 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 7d 2e 67 61 6c 6c 65 72 79 2d 66 6f 72 6d 61 74 7b 6f 70 61 63 69 74 Data Ascii: width:20px;height:20px}.single-post ul.ospm-default li:after{content:"-"}.single-post ul.ospm-modern li:after{content:"\|"}.single-post ul.ospm-stylish li:after{content:"//"}.single-post ul.ospm-none li:after{content:"";margin:0 10px}.gallery-format{opacit
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 73 20 73 70 61 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 38 70 78 3b 6d 61 72 67 69 6e 3a 30 20 38 70 78 20 30 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 39 65 39 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 Data Ascii: s span{position:relative;display:inline-block;min-width:38px;min-width:38px;line-height:38px;margin:0 8px 0 0;text-align:center;color:#555;border:1px solid #e9e9e9;font-size:18px;cursor:pointer;white-space:nowrap;-webkit-border-radius:2px;-moz-border-radi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49746	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:15 UTC	595	OUT	GET /wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:15 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:15 GMT Content-Type: application/javascript Content-Length: 3654 Last-Modified: Fri, 10 Nov 2023 09:59:07 GMT Connection: close ETag: "654dfeeb-e46" Expires: Mon, 01 Jan 2024 23:36:15 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:15 UTC	3654	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 59 6d 45 63 28 6f 70 74 69 6f 6e 73 29 7b 63 6f 6e 73 74 20 73 65 6c 66 3d 74 68 69 73 3b 6c 65 74 20 70 72 6f 64 75 63 74 73 3d 7b 7d 3b 6c 65 74 20 63 61 72 74 49 74 65 6d 73 3d 7b 7d 3b 6c 65 74 20 64 65 74 61 69 6c 50 72 6f 64 75 63 74 49 64 3d 6e 75 6c 6c 3b 6c 65 74 20 63 75 72 72 65 6e 63 79 3d 6e 75 6c 6c 3b 6c 65 74 20 68 61 73 41 63 74 69 76 65 56 61 72 69 61 74 69 6f 6e 3d 66 61 6c 73 65 3b 6c 65 74 20 73 65 6e 74 44 65 74 61 69 6c 73 3d 5b 5d 3b 6c 65 74 20 64 61 74 61 4c 61 79 65 72 4e 61 6d 65 3d 6f 70 74 69 6f 6e 73 3f 6f 70 74 69 6f 6e 73 3a 22 64 61 74 61 4c 61 79 65 72 22 3b 77 69 6e 64 6f 77 5b 64 61 74 61 4c 61 79 65 72 4e 61 6d 65 5d 3d 77 69 6e 64 6f 77 5b 64 61 74 61 4c 61 79 65 72 4e 61 6d 65 5d 7c 7c 5b Data Ascii: function YmEc(options){const self=this;let products={};let cartItems={};let detailProductId=null;let currency=null;let hasActiveVariation=false;let sentDetails=[];let dataLayerName=options?options:"dataLayer";window[dataLayerName]=window[dataLayerName]\|\|[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49747	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:15 UTC	575	OUT	GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:16 UTC	329	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:16 GMT Content-Type: application/javascript Content-Length: 87553 Last-Modified: Tue, 07 Nov 2023 23:15:36 GMT Connection: close ETag: "654ac518-15601" Expires: Mon, 01 Jan 2024 23:36:16 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:16 UTC	16055	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 Data Ascii: .empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.get
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 3b 72 65 74 75 72 6e 20 5f 2e 67 65 74 28 65 2c 6e 29 7c 7c 5f 2e 61 63 63 65 73 73 28 65 2c 6e 2c 7b 65 6d 70 74 79 3a 63 65 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 72 65 6d 6f 76 65 28 65 2c 5b 74 2b 22 71 75 65 75 65 22 2c 6e 5d 29 7d 29 7d 29 7d 7d 29 2c 63 65 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 32 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 66 78 22 2c 65 2d 2d 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c Data Ascii: ks:function(e,t){var n=t+"queueHooks";return _.get(e,n)\|\|_.access(e,n,{empty:ce.Callbacks("once memory").add(function(){_.remove(e,[t+"queue",n])})})}}),ce.fn.extend({queue:function(t,n){var e=2;return"string"!=typeof t&&(n=t,t="fx",e--),arguments.length<
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 28 65 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 70 6c 61 63 65 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 63 65 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 6e 29 3c 30 26 26 28 63 65 2e 63 6c 65 61 6e 44 61 74 61 28 53 65 28 74 68 69 73 29 29 2c 74 26 26 74 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 65 2c 74 68 69 73 29 29 7d 2c 6e 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 Data Ascii: (e)},null,e,arguments.length)},replaceWith:function(){var n=[];return $e(this,arguments,function(e){var t=this.parentNode;ce.inArray(this,n)<0&&(ce.cleanData(Se(this)),t&&t.replaceChild(e,this))},n)}}),ce.each({appendTo:"append",prependTo:"prepend",insert
2023-12-31 23:36:16 UTC	16384	IN	Data Raw: 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d 63 65 2e 70 72 6f 70 46 69 78 5b 74 5d 7c 7c 74 2c 69 3d 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 74 3f Data Ascii: =o)return 1===o&&ce.isXMLDoc(e)\|\|(t=ce.propFix[t]\|\|t,i=ce.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{get:function(e){var t=ce.find.attr(e,"tabindex");return t?
2023-12-31 23:36:17 UTC	5962	IN	Data Raw: 6c 6c 62 61 63 6b 22 2c 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4b 74 2e 70 6f 70 28 29 7c 7c 63 65 2e 65 78 70 61 6e 64 6f 2b 22 5f 22 2b 6a 74 2e 67 75 69 64 2b 2b 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 65 5d 3d 21 30 2c 65 7d 7d 29 2c 63 65 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 6a 73 6f 6e 20 6a 73 6f 6e 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 3d 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 5a 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 26 26 30 3d 3d 3d 28 65 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 Data Ascii: llback",jsonpCallback:function(){var e=Kt.pop()\|\|ce.expando+"_"+jt.guid++;return this[e]=!0,e}}),ce.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Zt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType\|\|"").indexOf("applic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49748	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:15 UTC	583	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:15 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:15 GMT Content-Type: application/javascript Content-Length: 13577 Last-Modified: Tue, 08 Aug 2023 23:15:34 GMT Connection: close ETag: "64d2cc96-3509" Expires: Mon, 01 Jan 2024 23:36:15 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:15 UTC	13577	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49749	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:15 UTC	599	OUT	GET /wp-content/plugins/wp-yandex-metrika/assets/frontend.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:15 UTC	325	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:15 GMT Content-Type: application/javascript Content-Length: 388 Last-Modified: Fri, 10 Nov 2023 09:59:07 GMT Connection: close ETag: "654dfeeb-184" Expires: Mon, 01 Jan 2024 23:36:15 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:15 UTC	388	IN	Data Raw: 69 66 28 77 69 6e 64 6f 77 2e 74 6d 70 77 70 79 6d 21 3d 75 6e 64 65 66 69 6e 65 64 29 7b 77 69 6e 64 6f 77 2e 77 70 79 6d 3d 7b 65 63 3a 6e 65 77 20 59 6d 45 63 28 77 69 6e 64 6f 77 2e 74 6d 70 77 70 79 6d 2e 64 61 74 61 6c 61 79 65 72 6e 61 6d 65 29 2c 63 6f 75 6e 74 65 72 73 3a 77 69 6e 64 6f 77 2e 74 6d 70 77 70 79 6d 2e 63 6f 75 6e 74 65 72 73 2c 74 61 72 67 65 74 73 3a 77 69 6e 64 6f 77 2e 74 6d 70 77 70 79 6d 2e 74 61 72 67 65 74 73 7d 7d 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 69 66 28 77 69 6e 64 6f 77 2e 77 70 79 6d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 7d 63 6f 6e 73 74 7b 74 61 72 67 65 74 73 2c 63 6f 75 6e 74 65 72 73 7d 3d 77 69 6e 64 6f 77 2e 77 70 79 6d 3b 66 6f 72 28 63 6f 6e 73 74 20 74 61 72 67 65 Data Ascii: if(window.tmpwpym!=undefined){window.wpym={ec:new YmEc(window.tmpwpym.datalayername),counters:window.tmpwpym.counters,targets:window.tmpwpym.targets}}jQuery(function($){if(window.wpym===undefined){return}const{targets,counters}=window.wpym;for(const targe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49750	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:15 UTC	607	OUT	GET /wp-content/plugins/wp-yandex-metrika/assets/contactFormSeven.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:16 UTC	325	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:16 GMT Content-Type: application/javascript Content-Length: 284 Last-Modified: Fri, 10 Nov 2023 09:59:07 GMT Connection: close ETag: "654dfeeb-11c" Expires: Mon, 01 Jan 2024 23:36:16 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:16 UTC	284	IN	Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 69 66 28 77 69 6e 64 6f 77 2e 77 70 79 6d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 7d 63 6f 6e 73 74 7b 63 6f 75 6e 74 65 72 73 7d 3d 77 69 6e 64 6f 77 2e 77 70 79 6d 3b 24 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 6f 6e 28 22 77 70 63 66 37 6d 61 69 6c 73 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 24 28 65 2e 74 61 72 67 65 74 29 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 22 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 63 6f 75 6e 74 65 72 73 2e 66 6f 72 45 61 63 68 28 63 6f 75 6e 74 65 72 3d 3e 7b 79 6d 28 63 6f 75 6e 74 65 72 2e 6e 75 6d 62 65 72 2c 22 72 65 61 63 68 47 6f 61 6c 22 2c Data Ascii: jQuery(function($){if(window.wpym===undefined){return}const{counters}=window.wpym;$(document.body).on("wpcf7mailsent",function(e){if($(e.target).find("input[type=email], input[type=tel]").length>0){counters.forEach(counter=>{ym(counter.number,"reachGoal",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49751	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:16 UTC	598	OUT	GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:16 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:16 GMT Content-Type: application/javascript Content-Length: 11117 Last-Modified: Tue, 26 Dec 2023 21:04:55 GMT Connection: close ETag: "658b3ff7-2b6d" Expires: Mon, 01 Jan 2024 23:36:16 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:16 UTC	11117	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 74 2e 6f 28 6e 2c 69 29 26 26 21 74 2e 6f 28 65 2c 69 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 69 5d 7d 29 7d 2c 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 Data Ascii: !function(){"use strict";var t={d:function(e,n){for(var i in n)t.o(n,i)&&!t.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:n[i]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49752	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:16 UTC	594	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:16 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:16 GMT Content-Type: application/javascript Content-Length: 13182 Last-Modified: Tue, 26 Dec 2023 21:04:55 GMT Connection: close ETag: "658b3ff7-337e" Expires: Mon, 01 Jan 2024 23:36:16 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:16 UTC	13182	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 4d 61 74 68 2e 61 62 73 28 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 29 2c 74 3d 28 65 2c 74 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 60 77 70 63 66 37 24 7b 74 7d 60 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 64 65 74 61 69 6c 3a 61 7d 29 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 29 2c 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 7d 2c 61 3d 28 65 2c 61 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 4d 61 70 28 5b 5b 22 69 6e 69 74 22 2c 22 69 6e 69 74 22 5d 2c 5b 22 76 61 6c 69 64 61 74 69 Data Ascii: !function(){"use strict";const e=e=>Math.abs(parseInt(e,10)),t=(e,t,a)=>{const n=new CustomEvent(`wpcf7${t}`,{bubbles:!0,detail:a});"string"==typeof e&&(e=document.querySelector(e)),e.dispatchEvent(n)},a=(e,a)=>{const n=new Map([["init","init"],["validati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49753	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:16 UTC	574	OUT	GET /wp-includes/js/imagesloaded.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:16 UTC	327	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:16 GMT Content-Type: application/javascript Content-Length: 5520 Last-Modified: Tue, 07 Nov 2023 23:15:36 GMT Connection: close ETag: "654ac518-1590" Expires: Mon, 01 Jan 2024 23:36:16 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:16 UTC	5520	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 35 2e 30 2e 30 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 74 2e 45 76 45 6d 69 74 74 65 72 3d 65 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d Data Ascii: /! This file is auto-generated //! imagesLoaded PACKAGED v5.0.0 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(t,e){"object"==typeof module&&module.exports?module.exports=e():t.EvEmitter=e()}("undefined"!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49754	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:16 UTC	588	OUT	GET /wp-content/themes/oceanwp/assets/js/theme.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:17 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:17 GMT Content-Type: application/javascript Content-Length: 19719 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-4d07" Expires: Mon, 01 Jan 2024 23:36:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:17 UTC	16056	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 61 28 6e 2c 69 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 69 66 28 21 69 5b 74 5d 29 7b 69 66 28 21 6e 5b 74 5d 29 7b 76 61 72 20 6c 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 6c 29 72 65 74 75 72 6e 20 6c 28 74 2c 21 30 29 3b 69 66 28 73 29 72 65 74 75 72 6e 20 73 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 6c 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6c 7d 6c 3d 69 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 6c 2e 65 78 70 6f Data Ascii: !function a(n,i,r){function o(t,e){if(!i[t]){if(!n[t]){var l="function"==typeof require&&require;if(!e&&l)return l(t,!0);if(s)return s(t,!0);throw(l=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",l}l=i[t]={exports:{}},n[t][0].call(l.expo
2023-12-31 23:36:17 UTC	3663	IN	Data Raw: 61 72 20 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 65 3d 74 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 3b 74 2e 76 61 6c 75 65 3f 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 73 65 61 72 63 68 2d 66 69 6c 6c 65 64 22 29 3a 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 73 65 61 72 63 68 2d 66 69 6c 6c 65 64 22 29 7d 7d 29 2c 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 75 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 63 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 64 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 22 40 62 61 62 65 6c 2f 72 75 6e 74 69 6d 65 2f 68 65 6c 70 65 72 73 2f 63 6c 61 73 73 43 61 6c Data Ascii: ar t=e.currentTarget,e=t.closest("form");t.value?e.classList.add("search-filled"):e.classList.remove("search-filled")}}),(0,o.default)(this,u).call(this),(0,o.default)(this,c).call(this),(0,o.default)(this,d).call(this)}},{"@babel/runtime/helpers/classCal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49755	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:17 UTC	604	OUT	GET /wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:17 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:17 GMT Content-Type: application/javascript Content-Length: 14087 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-3707" Expires: Mon, 01 Jan 2024 23:36:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:17 UTC	14087	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 72 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 69 66 28 21 72 5b 74 5d 29 7b 69 66 28 21 69 5b 74 5d 29 7b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 6e 29 72 65 74 75 72 6e 20 6e 28 74 2c 21 30 29 3b 69 66 28 73 29 72 65 74 75 72 6e 20 73 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 6e 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6e 7d 6e 3d 72 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 69 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f Data Ascii: !function o(i,r,l){function a(t,e){if(!r[t]){if(!i[t]){var n="function"==typeof require&&require;if(!e&&n)return n(t,!0);if(s)return s(t,!0);throw(n=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",n}n=r[t]={exports:{}},i[t][0].call(n.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49756	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:17 UTC	599	OUT	GET /wp-content/themes/oceanwp/assets/js/drop-down-search.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:17 UTC	327	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:17 GMT Content-Type: application/javascript Content-Length: 7540 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-1d74" Expires: Mon, 01 Jan 2024 23:36:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:17 UTC	7540	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 73 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 69 66 28 21 73 5b 74 5d 29 7b 69 66 28 21 6e 5b 74 5d 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 72 29 72 65 74 75 72 6e 20 72 28 74 2c 21 30 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 61 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 72 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 72 7d 72 3d 73 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f Data Ascii: !function o(n,s,l){function u(t,e){if(!s[t]){if(!n[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(a)return a(t,!0);throw(r=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",r}r=s[t]={exports:{}},n[t][0].call(r.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49757	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:17 UTC	605	OUT	GET /wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:18 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:17 GMT Content-Type: application/javascript Content-Length: 20216 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-4ef8" Expires: Mon, 01 Jan 2024 23:36:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:18 UTC	16056	IN	Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 31 2e 31 2e 30 20 2d 20 32 30 31 36 2d 30 32 2d 32 30 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 77 69 6e 64 6f 77 2e 6a 51 Data Ascii: /! Magnific Popup - v1.1.0 - 2016-02-20 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2016 Dmitry Semenov; */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):window.jQ
2023-12-31 23:36:18 UTC	4160	IN	Data Raw: 2d 3d 61 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2d 66 3b 76 61 72 20 68 3d 7b 77 69 64 74 68 3a 64 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 28 75 3f 64 2e 69 6e 6e 65 72 48 65 69 67 68 74 28 29 3a 64 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 2d 67 2d 66 7d 3b 72 65 74 75 72 6e 20 4f 28 29 3f 68 5b 22 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 22 5d 3d 68 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 22 2b 65 2e 6c 65 66 74 2b 22 70 78 2c 22 2b 65 2e 74 6f 70 2b 22 70 78 29 22 3a 28 68 2e 6c 65 66 74 3d 65 2e 6c 65 66 74 2c 68 2e 74 6f 70 3d 65 2e 74 6f 70 29 2c 68 7d 7d 7d 29 3b 76 61 72 20 50 3d 22 69 66 72 61 6d 65 22 2c 51 3d 22 2f 2f 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 52 3d 66 75 6e 63 74 69 Data Ascii: -=a(window).scrollTop()-f;var h={width:d.width(),height:(u?d.innerHeight():d[0].offsetHeight)-g-f};return O()?h["-moz-transform"]=h.transform="translate("+e.left+"px,"+e.top+"px)":(h.left=e.left,h.top=e.top),h}}});var P="iframe",Q="//about:blank",R=functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49758	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:17 UTC	684	OUT	GET /wp-content/themes/oceanwp/assets/fonts/simple-line-icons/Simple-Line-Icons.woff2?v=2.4.0 HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://faq-kak.ru/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:18 UTC	330	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:17 GMT Content-Type: application/octet-stream Content-Length: 30064 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-7570" Expires: Mon, 01 Jan 2024 23:36:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:18 UTC	16054	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 75 70 00 0d 00 00 00 00 d3 28 00 00 75 14 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 56 00 82 62 11 08 0a 83 84 00 82 b5 25 01 36 02 24 03 83 0c 0b 83 04 00 04 20 05 84 07 07 91 38 1b 63 a9 55 46 86 8d 03 00 24 cf 43 8d 44 04 1b 07 80 d0 b4 2b fb ff 73 82 1a 63 c8 bf f3 40 5a 66 9b 05 cd 24 b5 6a 95 ed 92 2c 0c 81 ac e8 8c 0b d7 01 f1 8d 1c 69 73 0b d3 6d bd 15 ff 70 1c 81 be 81 d6 19 5e 0c 3d d3 ad 9d f6 45 8a d8 06 7d 4f f5 73 49 0f f4 30 53 fc 6c e2 ff ee 7c fc d4 e4 45 a3 13 9e ca 5f ed f5 74 cf 3f 11 9b c3 4d fe de 4a e5 58 ce 46 a8 05 09 21 1e 51 39 5c 8c 79 48 78 35 c3 f3 6b f3 fd fb 17 cd 35 70 47 5c 00 47 d4 71 44 df bf e2 38 f2 38 38 22 ef 88 a3 44 a2 55 e0 88 Data Ascii: wOF2up(u?FFTMVb%6$ 8cUF$CD+sc@Zf$j,ismp^=E}OsI0Sl\|E_t?MJXF!Q9\yHx5k5pG\GqD888"DU
2023-12-31 23:36:18 UTC	14010	IN	Data Raw: 2c 40 1d a0 0a 48 09 00 91 10 9f 8f f2 65 66 39 eb fd b5 f2 f0 e2 89 d6 39 3a 4f 15 a8 e2 39 f9 b8 f1 e7 06 73 7c 37 1f 27 e7 f9 13 f9 61 75 df 36 a2 3c c3 d6 0a 3e aa 6b eb 77 cb 1c d9 df 3f 19 f6 f7 65 ea 58 a3 c7 12 b9 af 42 c2 ca 3b 81 43 16 84 ea 96 99 ff 21 99 1b 84 c3 16 0b 4f c5 93 5b 9d 2c 5b 30 36 9a 7a 09 5f 87 a6 f4 7d 73 98 ee d1 89 a4 9f f9 2f 80 60 f1 58 b3 7a 64 56 6e 79 d4 d6 39 b7 10 df 80 2b 24 b7 1d ad 59 98 b1 1c 9b 05 08 6d ac 32 e9 f3 53 92 85 07 0f 19 64 86 2d 5b cc 4a db d5 b6 1c 22 46 c4 dd 2a f4 57 c7 04 72 bd 5e 9f e5 12 6e 14 64 58 ad 59 bb eb 98 c3 b1 5d 8b 2a 30 59 aa 50 27 84 f7 27 4f 2e b2 de 63 78 98 16 55 5a 1a 6e f9 c1 43 45 95 75 e5 e5 7d bd 9b f6 5a 77 06 9d cd a1 8f 8d 2d ec d3 63 00 c0 a0 7c 10 24 07 91 fb 70 86 1f Data Ascii: ,@Hef99:O9s\|7'au6<>kw?eXB;C!O[,[06z_}s/`XzdVny9+$Ym2Sd-[J"FWr^ndXY]0YP''O.cxUZnCEu}Zw-c\|$p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49759	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:17 UTC	672	OUT	GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://faq-kak.ru/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:18 UTC	331	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:18 GMT Content-Type: application/octet-stream Content-Length: 80300 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-139ac" Expires: Mon, 01 Jan 2024 23:36:18 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:18 UTC	16053	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 39 ac 00 0d 00 00 00 03 1e ec 00 01 39 52 01 4b 85 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 99 4e 11 08 0a 8a f4 60 88 ce 40 01 36 02 24 03 9f 30 0b 9f 34 00 04 20 05 8a 2b 07 e2 2e 5b 32 7b 92 01 32 ef a7 51 32 be ad 0a 4c 34 6e e4 2b a6 9b 3b 05 ba 0d a0 e6 45 aa 8c 74 ae 84 3b de dd 4a e4 d4 10 71 65 ff ff ff ff bf ef 68 88 39 a5 b3 75 b6 63 c7 e9 47 52 fa d1 01 85 75 0c d8 43 92 21 db 9d 13 a5 5c 86 5a a9 96 06 1f d1 bd d0 38 95 55 c1 3a 61 83 ba a5 15 09 eb dd 83 35 2f 7d d9 af 3a 15 e3 91 0e 3c 3b 76 89 9d 33 5a 45 a2 34 e6 b1 94 f0 63 68 7a f0 c5 14 1f 59 2c 16 4e 23 c6 3a 96 80 21 f8 1c 7e 89 52 51 6b c5 62 96 a0 3e 4c c3 c0 4f c6 95 14 28 92 21 1a 26 14 fd 08 7f Data Ascii: wOF299RK`?FFTM`N`@6$04 +.[2{2Q2L4n+;Et;Jqeh9ucGRuC!\Z8U:a5/}:<;v3ZE4chzY,N#:!~RQkb>LO(!&
2023-12-31 23:36:18 UTC	16384	IN	Data Raw: 56 37 10 81 f1 13 d5 c9 32 f7 23 90 37 ca c4 2e 47 37 4f 1b 78 51 97 e0 3e 9d 8d b5 02 ec 3a 8f 55 70 13 2c 36 10 0b 20 3a aa d8 36 94 74 fa f6 60 de 84 8a 42 63 94 87 f2 22 f3 34 2a 6d 61 73 d0 50 95 66 67 ed 72 2f b7 99 62 b9 35 de 7d c0 21 69 2d 02 b8 92 c0 61 5f b0 8d 68 a3 d3 51 95 eb 0a 4e 8d 2c a1 b8 52 d0 79 22 f1 8b af 00 93 9e 09 4a 22 0f a6 99 a1 32 ae 02 a8 a5 bc 64 f1 8d 97 19 60 d7 5e 4e 6d 60 eb 20 73 72 9a 9d ea a5 db e6 6e 92 69 53 39 66 ec 64 c8 93 f6 76 71 d2 ba 8d d7 ff 53 2e ef 3f a1 01 86 f2 b4 e6 64 81 8a 5b 37 eb c5 aa 90 f1 f8 c8 29 af 07 91 9e b4 3c af 05 9d a3 cc 0d 6b 5d 8e 18 43 1a 25 5e e5 a9 47 32 3f 46 ee 54 93 f2 e0 26 3c 78 1a a9 4d 4e 48 d7 69 81 24 26 e4 f5 1b 4a 53 b3 36 b3 15 8f bd 8c 07 8e 3b 2c 66 8e 7a 9a 8e 7e eb Data Ascii: V72#7.G7OxQ>:Up,6 :6t`Bc"4*masPfgr/b5}!i-a_hQN,Ry"J"2d`^Nm` srniS9fdvqS.?d[7)<k]C%^G2?FT&<xMNHi$&JS6;,fz~
2023-12-31 23:36:18 UTC	16384	IN	Data Raw: 51 13 93 07 a0 b3 0b 8c ca 6c 7f cb eb 13 d0 39 78 1f 01 43 c6 d3 b6 03 6a 94 e6 f6 11 86 35 0b a2 af 0d 93 42 5e 5e ef bd 18 02 13 7d 78 0e 95 ef 39 51 eb 21 f7 09 d3 ec 78 44 83 3f 00 57 23 3a 2a 90 8f 41 11 89 70 44 32 c1 51 b3 a1 88 7c 8c 25 72 dd 72 90 03 ef c4 0c 06 2f c7 d5 78 74 37 2c 02 ef a0 10 09 1b 5a 91 01 73 a5 1d 1b 3f a9 f0 36 07 6a 3b a5 e4 39 6a 2f 58 d5 fc 52 9b 5d 43 99 0b bc b6 f6 09 76 26 67 1d 8c 9a b3 e2 d4 95 8f 28 6d e8 4f 1f 7d b4 b8 89 55 5e 18 5d ba 9a 83 db 1d 1a f9 8d 9c 01 ca a5 dd f2 7f 12 a0 f6 4f 78 e1 b4 22 be 36 50 16 fc ae bc 8e 56 d7 99 a2 90 16 fa 2c 4e 20 3e bd 3d ae 5b 8a a6 db 16 fe 33 9a 7c 91 48 79 ba 00 4a 90 c1 bc aa b3 03 aa 1c e6 09 9b 84 a0 83 fe e6 be 31 00 c7 43 d1 c5 c9 7a b4 a6 5d a8 15 1a f9 d3 de fb Data Ascii: Ql9xCj5B^^}x9Q!xD?W#:*ApD2Q\|%rr/xt7,Zs?6j;9j/XR]Cv&g(mO}U^]Ox"6PV,N >=[3\|HyJ1Cz]
2023-12-31 23:36:18 UTC	16384	IN	Data Raw: d6 2f ad 4f 40 cd a9 ac ad 6d 6a ca cb ce 2c 44 e5 b7 e3 18 9e a9 bf c9 2e 5d ef 7d fa d7 b9 f8 65 1f 12 44 e0 06 fa 03 22 ea 6d f6 67 2b bb bd 88 91 01 c2 4f 81 a6 bf d1 f9 5e 1e 03 c2 56 5b 5a b4 df af d0 87 8f 35 ab b9 8f 1f fc 30 06 e1 1a 97 e5 75 92 03 66 1e 3f 76 b6 4d 37 3b ab 6e e6 d4 f3 80 45 fc b7 a1 b1 85 dc 1e a2 72 cc e8 b7 6b 08 03 a3 69 0f 98 91 9a ff ca 72 6b 1d 36 db 8b 2f 79 59 7b b3 b1 6d ee d9 b3 07 06 36 43 dd a9 26 b1 8c b4 1f 08 be 93 9c be 32 55 9f 48 15 0c b3 43 bf 14 50 c6 2b 6b fd 07 a2 80 f2 fe 65 39 67 41 50 28 27 7b 56 2f 7b fc 3f 44 01 7a 68 6c 55 4d b4 26 07 6f 3e 4d 92 91 32 e1 ba ce e5 49 bf 86 e3 f3 e2 49 a7 41 8f 58 35 50 2e 50 f7 5a 3b f9 6c 25 cb 30 9b cd 37 83 34 d2 20 b5 5a 7f 8a 9d 4e 88 9f 23 3a 88 b9 00 2f 34 b2 Data Ascii: /O@mj,D.]}eD"mg+O^V[Z50uf?vM7;nErkirk6/yY{m6C&2UHCP+ke9gAP('{V/{?DzhlUM&o>M2IIAX5P.PZ;l%074 ZN#:/4
2023-12-31 23:36:18 UTC	15095	IN	Data Raw: 90 15 f5 42 84 76 df f2 26 e7 de f4 b0 8c 20 f5 9d 4d e9 17 7d 3e dd 8b 91 9b 31 e3 af ea 1d 81 7f 10 62 1f 31 e1 90 3a 28 e3 e1 63 68 af b3 69 f9 3e ad 57 8e cf c5 f4 4d 89 3f 39 ea 13 7c b0 0e b7 5d 1f 19 74 5a fe 3e 1c cb 11 5e 34 9f 3a f6 f0 7f 8d ab 58 27 d3 15 92 a8 06 f2 7f 06 30 19 f0 c7 23 c9 44 27 65 05 89 f4 24 9d e4 42 08 18 ed 84 8c 8c 77 76 ae d6 0e cb 8a 50 11 6c 99 91 f4 f7 35 34 7f fd c5 6d 3e 5a e3 c9 8f 02 23 6a f1 4e 27 8f a3 ef 51 b6 70 4c 2c 03 61 67 54 e1 69 b5 28 4e fa e4 09 85 87 3d 7a 75 bf 7c 5f 36 04 41 b5 77 c9 2e a8 ae 86 dd fa 87 fe 77 83 50 57 7d b2 86 57 9d f9 3f 9c 38 e6 29 59 e9 99 ec 18 01 e3 f9 62 02 00 c1 e0 36 31 40 da bc 06 52 56 92 2e 3e b9 79 68 70 70 4d ea 8c 5b ea c6 1f da 7c 72 b1 2d 12 4b da 17 34 20 46 59 3a Data Ascii: Bv& M}>1b1:(chi>WM?9\|]tZ>^4:X'0#D'e$BwvPl54m>Z#jN'QpL,agTi(N=zu\|_6Aw.wPW}W?8)Yb61@RV.>yhppM[\|r-K4 FY:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49760	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:18 UTC	594	OUT	GET /wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:18 UTC	327	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:18 GMT Content-Type: application/javascript Content-Length: 4111 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-100f" Expires: Mon, 01 Jan 2024 23:36:18 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:18 UTC	4111	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 72 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 69 66 28 21 72 5b 74 5d 29 7b 69 66 28 21 69 5b 74 5d 29 7b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 6e 29 72 65 74 75 72 6e 20 6e 28 74 2c 21 30 29 3b 69 66 28 73 29 72 65 74 75 72 6e 20 73 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 6e 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6e 7d 6e 3d 72 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 69 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f Data Ascii: !function o(i,r,l){function a(t,e){if(!r[t]){if(!i[t]){var n="function"==typeof require&&require;if(!e&&n)return n(t,!0);if(s)return s(t,!0);throw(n=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",n}n=r[t]={exports:{}},i[t][0].call(n.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49761	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:18 UTC	604	OUT	GET /wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:19 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:18 GMT Content-Type: application/javascript Content-Length: 57513 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-e0a9" Expires: Mon, 01 Jan 2024 23:36:18 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:19 UTC	16056	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6c 69 63 6b 69 74 79 20 50 41 43 4b 41 47 45 44 20 76 32 2e 32 2e 32 0a 20 2a 20 54 6f 75 63 68 2c 20 72 65 73 70 6f 6e 73 69 76 65 2c 20 66 6c 69 63 6b 61 62 6c 65 20 63 61 72 6f 75 73 65 6c 73 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 66 6f 72 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 75 73 65 0a 20 2a 20 6f 72 20 46 6c 69 63 6b 69 74 79 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 66 6c 69 63 6b 69 74 79 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 31 20 4d 65 74 61 66 69 7a 7a 79 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 Data Ascii: /! Flickity PACKAGED v2.2.2 * Touch, responsive, flickable carousels * * Licensed GPLv3 for open source use * or Flickity Commercial License for commercial use * * https://flickity.metafizzy.co * Copyright 2015-2021 Metafizzy */(function(e,i)
2023-12-31 23:36:19 UTC	16384	IN	Data Raw: 65 6c 6c 73 5b 74 68 69 73 2e 63 65 6c 6c 73 2e 6c 65 6e 67 74 68 2d 31 5d 7d 3b 76 2e 67 65 74 4c 61 73 74 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 65 73 5b 74 68 69 73 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2d 31 5d 7d 3b 76 2e 70 6f 73 69 74 69 6f 6e 43 65 6c 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 73 69 7a 65 43 65 6c 6c 73 28 74 68 69 73 2e 63 65 6c 6c 73 29 3b 74 68 69 73 2e 5f 70 6f 73 69 74 69 6f 6e 43 65 6c 6c 73 28 30 29 7d 3b 76 2e 5f 70 6f 73 69 74 69 6f 6e 43 65 6c 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 74 7c 7c 30 3b 74 68 69 73 2e 6d 61 78 43 65 6c 6c 48 65 69 67 68 74 3d 74 3f 74 68 69 73 2e 6d 61 78 43 65 6c 6c 48 65 69 67 68 74 7c 7c 30 3a 30 3b Data Ascii: ells[this.cells.length-1]};v.getLastSlide=function(){return this.slides[this.slides.length-1]};v.positionCells=function(){this._sizeCells(this.cells);this._positionCells(0)};v._positionCells=function(t){t=t\|\|0;this.maxCellHeight=t?this.maxCellHeight\|\|0:0;
2023-12-31 23:36:19 UTC	16384	IN	Data Raw: 77 6e 42 6c 75 72 28 29 7d 74 68 69 73 2e 64 72 61 67 58 3d 74 68 69 73 2e 78 3b 74 68 69 73 2e 76 69 65 77 70 6f 72 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 69 73 2d 70 6f 69 6e 74 65 72 2d 64 6f 77 6e 22 29 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 44 6f 77 6e 53 63 72 6f 6c 6c 3d 68 28 29 3b 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 29 3b 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 44 6f 77 6e 44 65 66 61 75 6c 74 28 74 2c 65 29 7d 3b 73 2e 5f 70 6f 69 6e 74 65 72 44 6f 77 6e 44 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 70 6f 69 6e 74 65 72 44 6f 77 6e 50 6f 69 6e 74 65 72 3d 7b 70 61 67 65 58 3a 65 2e 70 61 67 65 58 2c 70 61 67 65 59 3a 65 2e 70 61 67 65 59 7d Data Ascii: wnBlur()}this.dragX=this.x;this.viewport.classList.add("is-pointer-down");this.pointerDownScroll=h();n.addEventListener("scroll",this);this._pointerDownDefault(t,e)};s._pointerDownDefault=function(t,e){this.pointerDownPointer={pageX:e.pageX,pageY:e.pageY}
2023-12-31 23:36:19 UTC	8689	IN	Data Raw: 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 74 68 69 73 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 2e 67 65 74 50 61 72 65 6e 74 43 65 6c 6c 28 74 68 69 73 2e 69 6d 67 29 3b 76 61 72 20 6e 3d 69 26 26 69 2e 65 6c 65 6d 65 6e 74 3b 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 2e 63 65 6c 6c 53 69 7a 65 43 68 61 6e 67 65 28 6e 29 3b 74 68 69 73 2e 69 6d 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 29 3b 74 68 69 73 2e 66 6c 69 63 6b 69 74 79 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 6c 61 7a 79 4c 6f 61 64 22 2c 74 2c 6e 29 7d 3b 69 2e 4c 61 7a 79 4c 6f 61 64 65 72 3d 72 3b 72 65 74 75 72 6e 20 69 7d 29 3b 0a 2f 2a 21 0a 20 2a 20 46 6c 69 63 6b 69 74 79 20 76 32 2e 32 2e 32 0a 20 2a 20 54 6f 75 63 68 2c 20 72 65 73 70 6f 6e 73 69 76 Data Ascii: tener("error",this);var i=this.flickity.getParentCell(this.img);var n=i&&i.element;this.flickity.cellSizeChange(n);this.img.classList.add(e);this.flickity.dispatchEvent("lazyLoad",t,n)};i.LazyLoader=r;return i});/! Flickity v2.2.2 * Touch, responsiv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49762	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:18 UTC	592	OUT	GET /wp-content/themes/oceanwp/assets/js/ow-slider.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:19 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:18 GMT Content-Type: application/javascript Content-Length: 2002 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-7d2" Expires: Mon, 01 Jan 2024 23:36:18 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:19 UTC	2002	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 6e 28 6f 2c 69 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 69 66 28 21 69 5b 74 5d 29 7b 69 66 28 21 6f 5b 74 5d 29 7b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 72 29 72 65 74 75 72 6e 20 72 28 74 2c 21 30 29 3b 69 66 28 75 29 72 65 74 75 72 6e 20 75 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 72 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 72 7d 72 3d 69 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6f 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f Data Ascii: !function n(o,i,l){function a(t,e){if(!i[t]){if(!o[t]){var r="function"==typeof require&&require;if(!e&&r)return r(t,!0);if(u)return u(t,!0);throw(r=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",r}r=i[t]={exports:{}},o[t][0].call(r.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49763	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:18 UTC	596	OUT	GET /wp-content/themes/oceanwp/assets/js/scroll-effect.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:19 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:19 GMT Content-Type: application/javascript Content-Length: 11887 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-2e6f" Expires: Mon, 01 Jan 2024 23:36:19 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:19 UTC	11887	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 72 28 69 2c 6e 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 69 66 28 21 6e 5b 74 5d 29 7b 69 66 28 21 69 5b 74 5d 29 7b 76 61 72 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 6f 29 72 65 74 75 72 6e 20 6f 28 74 2c 21 30 29 3b 69 66 28 73 29 72 65 74 75 72 6e 20 73 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 6f 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6f 7d 6f 3d 6e 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 69 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f Data Ascii: !function r(i,n,l){function a(t,e){if(!n[t]){if(!i[t]){var o="function"==typeof require&&require;if(!e&&o)return o(t,!0);if(s)return s(t,!0);throw(o=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",o}o=n[t]={exports:{}},i[t][0].call(o.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49764	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:18 UTC	593	OUT	GET /wp-content/themes/oceanwp/assets/js/scroll-top.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:19 UTC	327	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:19 GMT Content-Type: application/javascript Content-Length: 8989 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-231d" Expires: Mon, 01 Jan 2024 23:36:19 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:19 UTC	8989	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 6c 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 69 66 28 21 6c 5b 74 5d 29 7b 69 66 28 21 6e 5b 74 5d 29 7b 76 61 72 20 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 6f 29 72 65 74 75 72 6e 20 6f 28 74 2c 21 30 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 61 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 6f 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6f 7d 6f 3d 6c 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6e 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f Data Ascii: !function i(n,l,r){function s(t,e){if(!l[t]){if(!n[t]){var o="function"==typeof require&&require;if(!e&&o)return o(t,!0);if(a)return a(t,!0);throw(o=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",o}o=l[t]={exports:{}},n[t][0].call(o.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49765	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:19 UTC	589	OUT	GET /wp-content/themes/oceanwp/assets/js/select.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:19 UTC	327	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:19 GMT Content-Type: application/javascript Content-Length: 5181 Last-Modified: Fri, 10 Nov 2023 09:31:04 GMT Connection: close ETag: "654df858-143d" Expires: Mon, 01 Jan 2024 23:36:19 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:19 UTC	5181	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 6c 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 69 66 28 21 6c 5b 74 5d 29 7b 69 66 28 21 61 5b 74 5d 29 7b 76 61 72 20 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 65 26 26 73 29 72 65 74 75 72 6e 20 73 28 74 2c 21 30 29 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 28 74 2c 21 30 29 3b 74 68 72 6f 77 28 73 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 29 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 73 7d 73 3d 6c 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 61 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 73 2e 65 78 70 6f Data Ascii: !function n(a,l,r){function i(t,e){if(!l[t]){if(!a[t]){var s="function"==typeof require&&require;if(!e&&s)return s(t,!0);if(o)return o(t,!0);throw(s=new Error("Cannot find module '"+t+"'")).code="MODULE_NOT_FOUND",s}s=l[t]={exports:{}},a[t][0].call(s.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49766	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:19 UTC	595	OUT	GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:20 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:19 GMT Content-Type: application/javascript Content-Length: 23433 Last-Modified: Mon, 05 Dec 2022 07:39:35 GMT Connection: close ETag: "638da037-5b89" Expires: Mon, 01 Jan 2024 23:36:19 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:20 UTC	16056	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 72 65 74 75 72 6e 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 64 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 66 6f 72 28 76 61 72 20 70 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 70 29 26 26 28 64 5b 70 5d 3d 62 5b 70 5d 29 7d 2c 65 78 74 65 6e 64 53 74 61 74 69 63 73 28 64 2c 62 29 7d Data Ascii: "use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics(d,b)}
2023-12-31 23:36:20 UTC	7377	IN	Data Raw: 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 73 65 6c 65 63 74 6f 72 29 3b 72 65 74 75 72 6e 21 21 65 6c 26 26 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 46 69 78 65 64 57 69 64 67 65 74 43 6c 61 73 73 4e 61 6d 65 29 7d 2c 53 74 69 63 6b 79 57 69 64 67 65 74 7d 28 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 29 2c 53 74 6f 70 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 5f 73 75 70 65 72 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 6f 70 57 69 64 67 65 74 28 65 6c 29 7b 76 61 72 20 5f 74 68 69 73 3d 5f 73 75 70 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 6c 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 6e 65 65 64 5f 74 6f 5f 63 61 6c 63 5f 65 6c 5f 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: cument.querySelector(selector);return!!el&&el.classList.contains(FixedWidgetClassName)},StickyWidget}(PositionWidget),StopWidget=function(_super){function StopWidget(el){var _this=_super.call(this,el)\|\|this;return _this.need_to_calc_el_offset=function(){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49767	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:19 UTC	598	OUT	GET /wp-content/plugins/quick-adsense-reloaded/assets/js/ads.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:20 UTC	325	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:19 GMT Content-Type: application/javascript Content-Length: 735 Last-Modified: Tue, 26 Dec 2023 21:04:44 GMT Connection: close ETag: "658b3fec-2df" Expires: Mon, 01 Jan 2024 23:36:19 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:20 UTC	735	IN	Data Raw: 76 61 72 20 77 70 71 75 61 64 73 5f 61 64 62 6c 6f 63 6b 65 72 5f 63 68 65 63 6b 20 3d 20 74 72 75 65 3b 0a 0a 76 61 72 20 77 70 71 75 61 64 73 5f 61 64 62 6c 6f 63 6b 65 72 5f 63 68 65 63 6b 5f 32 20 3d 20 74 72 75 65 3b 0a 0a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 70 71 75 61 64 73 5f 73 74 69 63 6b 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 71 75 61 64 73 2d 73 74 69 63 6b 79 20 2e 71 75 61 64 73 2d 6c 6f 63 61 74 69 6f 6e 22 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 70 71 75 61 64 73 5f 6c 6f 63 61 74 69 6f 6e Data Ascii: var wpquads_adblocker_check = true;var wpquads_adblocker_check_2 = true;window.addEventListener("load", function(){ setTimeout(()=>{ var wpquads_sticky = document.querySelector(".quads-sticky .quads-location"); var wpquads_location

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49770	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:21 UTC	575	OUT	GET /wp-includes/js/comment-reply.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:22 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:22 GMT Content-Type: application/javascript Content-Length: 2981 Last-Modified: Mon, 05 Dec 2022 07:21:42 GMT Connection: close ETag: "638d9c06-ba5" Expires: Mon, 01 Jan 2024 23:36:22 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:22 UTC	2981	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 61 64 64 43 6f 6d 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 49 2c 43 2c 68 2c 45 3d 76 2e 64 6f 63 75 6d 65 6e 74 2c 62 3d 7b 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 43 6c 61 73 73 3a 22 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 52 65 70 6c 79 54 69 74 6c 65 49 64 3a 22 72 65 70 6c 79 2d 74 69 74 6c 65 22 2c 63 61 6e 63 65 6c 52 65 70 6c 79 49 64 3a 22 63 61 6e 63 65 6c 2d 63 6f 6d 6d 65 6e 74 2d 72 65 70 6c 79 2d 6c 69 6e 6b 22 2c 63 6f 6d 6d 65 6e 74 46 6f 72 6d 49 64 3a 22 63 6f 6d 6d 65 6e 74 66 6f 72 6d 22 2c 74 65 6d 70 6f 72 61 72 79 46 6f 72 6d 49 64 3a 22 77 70 2d 74 Data Ascii: /! This file is auto-generated /window.addComment=function(v){var I,C,h,E=v.document,b={commentReplyClass:"comment-reply-link",commentReplyTitleId:"reply-title",cancelReplyId:"cancel-comment-reply-link",commentFormId:"commentform",temporaryFormId:"wp-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49771	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:21 UTC	591	OUT	GET /wp-content/plugins/akismet/_inc/akismet-frontend.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:22 UTC	328	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:21 GMT Content-Type: application/javascript Content-Length: 10733 Last-Modified: Wed, 20 Sep 2023 06:17:57 GMT Connection: close ETag: "650a8e95-29ed" Expires: Mon, 01 Jan 2024 23:36:21 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:22 UTC	10733	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 62 73 65 72 76 65 20 68 6f 77 20 74 68 65 20 75 73 65 72 20 65 6e 74 65 72 73 20 63 6f 6e 74 65 6e 74 20 69 6e 74 6f 20 74 68 65 20 63 6f 6d 6d 65 6e 74 20 66 6f 72 6d 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 64 65 74 65 72 6d 69 6e 65 20 77 68 65 74 68 65 72 20 69 74 27 73 20 61 20 62 6f 74 20 6f 72 20 6e 6f 74 2e 0a 20 2a 0a 20 2a 20 4e 6f 74 65 20 74 68 61 74 20 6e 6f 20 61 63 74 75 61 6c 20 69 6e 70 75 74 20 69 73 20 62 65 69 6e 67 20 73 61 76 65 64 20 68 65 72 65 2c 20 6f 6e 6c 79 20 63 6f 75 6e 74 73 20 61 6e 64 20 74 69 6d 69 6e 67 73 20 62 65 74 77 65 65 6e 20 65 76 65 6e 74 73 2e 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 2f 2f 20 50 61 73 73 69 76 65 20 65 76 65 6e 74 20 6c 69 73 74 65 6e 65 72 73 20 Data Ascii: /** * Observe how the user enters content into the comment form in order to determine whether it's a bot or not. * * Note that no actual input is being saved here, only counts and timings between events. */( function() {// Passive event listeners

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49768	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:21 UTC	606	OUT	GET /wp-content/plugins/rocket-lazy-load/assets/js/16.1/lazyload.min.js HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:22 UTC	327	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:36:22 GMT Content-Type: application/javascript Content-Length: 7890 Last-Modified: Mon, 05 Dec 2022 07:29:05 GMT Connection: close ETag: "638d9dc1-1ed2" Expires: Mon, 01 Jan 2024 23:36:22 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:36:22 UTC	7890	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 6e 29 3a 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 4c 61 7a 79 4c 6f 61 64 3d 6e 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 28 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 Data Ascii: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define(n):(t=t\|\|self).LazyLoad=n()}(this,(function(){"use strict";function t(){return(t=Object.assign\|\|function(t){for(var n=1;n<a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49773	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:21 UTC	523	OUT	GET /system/context.js HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:22 UTC	454	IN	HTTP/1.1 200 Ok Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600 Connection: Close Content-Type: text/javascript; charset=utf-8 Expires: Mon, 01 Jan 2024 00:36:21 GMT Keep-Alive: timeout=600 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Transfer-Encoding: chunked X-Robots-Tag: noindex, noarchive, nofollow X-Yandex-Req-Id: 1704065781981789-607285736745908799700370-production-app-host-vla-pcode-241
2023-12-31 23:36:22 UTC	3848	IN	Data Raw: 46 30 31 0d 0a 2f 2a 21 20 76 3a 39 33 37 36 39 31 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 6c 6f 61 64 65 72 73 2f 63 6f 6e 74 65 78 74 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 Data Ascii: F01/! v:937691 b:default c:loaders/context /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbi
2023-12-31 23:36:22 UTC	3931	IN	Data Raw: 46 35 34 0d 0a 5f 3d 74 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 72 28 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 Data Ascii: F54_=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},r(e,t)},function(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this
2023-12-31 23:36:22 UTC	4252	IN	Data Raw: 31 30 39 34 0d 0a 7b 70 72 69 63 65 3a 72 2f 31 30 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 2d 54 48 22 5d 7d 29 3b 63 61 73 65 20 6e 5b 22 31 30 30 2d 54 48 22 5d 3a 72 65 74 75 72 6e 20 65 2e 63 6f 75 6e 74 43 70 6d 46 72 6f 6d 55 6e 69 74 28 7b 70 72 69 63 65 3a 72 2f 31 30 30 2c 75 6e 69 74 3a 6e 5b 22 31 2d 54 48 22 5d 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7b 70 72 69 63 65 3a 4e 75 6d 62 65 72 28 72 2e 74 6f 46 69 78 65 64 28 33 29 29 2c 75 6e 69 74 3a 6f 7d 7d 7d 2c 65 2e 69 73 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 65 2e 74 6f 46 69 78 65 64 28 33 29 29 25 31 3d 3d 30 7d 2c 65 7d 28 29 3b 74 2e 43 6f 73 74 3d 6f 7d 2c 39 33 31 30 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 Data Ascii: 1094{price:r/10,unit:n["100-TH"]});case n["100-TH"]:return e.countCpmFromUnit({price:r/100,unit:n["1-TH"]});default:return{price:Number(r.toFixed(3)),unit:o}}},e.isInt=function(e){return Number(e.toFixed(3))%1==0},e}();t.Cost=o},93100:function(e,t){"use
2023-12-31 23:36:22 UTC	3923	IN	Data Raw: 46 34 43 0d 0a 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6e 29 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 2c 72 28 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 72 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 Data Ascii: F4CnProperty.call(t,n)&&(e[n]=t[n])},r(e,t)},function(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(
2023-12-31 23:36:22 UTC	4260	IN	Data Raw: 31 30 39 43 0d 0a 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 31 29 3a 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 74 2e 61 64 64 45 76 65 6e 74 3d 61 2c 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 73 2c 74 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 6e 2c 72 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 65 2c 74 2c 6e 29 7d 7d 2c 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3f 28 65 2e 73 74 6f Data Ascii: 109CtachEvent("on"+t,n)}function s(e,t,n){e.removeEventListener?e.removeEventListener(t,n,!1):e.detachEvent("on"+t,n)}t.addEvent=a,t.removeEvent=s,t.on=function(e,t,n,r){return a(e,t,n,r),function(){s(e,t,n)}},t.stop=function(e){e.stopPropagation?(e.sto
2023-12-31 23:36:22 UTC	3915	IN	Data Raw: 46 34 34 0d 0a 74 2e 75 54 3d 74 2e 63 78 3d 76 6f 69 64 20 30 2c 74 2e 63 78 3d 5b 5d 2c 74 2e 75 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6e 28 34 31 34 38 36 29 2e 69 73 53 74 72 69 6e 67 29 28 65 29 3f 28 30 2c 6e 28 39 34 33 32 30 29 2e 66 69 6c 74 65 72 29 28 74 2e 63 78 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 43 6f 6e 74 61 69 6e 65 72 49 64 28 29 3d 3d 3d 65 7d 29 29 3a 65 3f 28 30 2c 6e 28 39 34 33 32 30 29 2e 66 69 6c 74 65 72 29 28 74 2e 63 78 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d Data Ascii: F44t.uT=t.cx=void 0,t.cx=[],t.uT=function(e,r){void 0===e&&(e=null);var o=function(e){return(0,n(41486).isString)(e)?(0,n(94320).filter)(t.cx,(function(t){return t.getContainerId()===e})):e?(0,n(94320).filter)(t.cx,(function(t){return t.getContainerElem
2023-12-31 23:36:22 UTC	4268	IN	Data Raw: 31 30 41 34 0d 0a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 59 61 7c 7c 28 65 2e 59 61 3d 7b 7d 29 2c 65 2e 59 61 2e 61 64 66 6f 78 43 6f 64 65 7c 7c 28 65 2e 59 61 2e 61 64 66 6f 78 43 6f 64 65 3d 7b 7d 29 2c 65 2e 59 61 2e 61 64 66 6f 78 43 6f 64 65 7d 2c 74 2e 6e 73 3d 28 30 2c 74 2e 61 64 64 41 64 66 6f 78 4e 61 6d 65 73 70 61 63 65 29 28 77 69 6e 64 6f 77 29 2c 74 2e 67 65 74 53 63 72 69 70 74 53 74 72 69 6e 67 46 6f 72 53 65 74 74 69 6e 67 47 6c 6f 62 61 6c 56 61 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 22 3b 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 22 2c 22 76 61 72 20 6e 73 20 3d 20 28 22 2e 63 6f 6e 63 61 74 28 74 2e 61 64 64 41 64 66 6f 78 4e 61 6d 65 73 70 61 63 65 2e 74 6f 53 74 72 69 6e 67 28 29 Data Ascii: 10A4function(e){return e.Ya\|\|(e.Ya={}),e.Ya.adfoxCode\|\|(e.Ya.adfoxCode={}),e.Ya.adfoxCode},t.ns=(0,t.addAdfoxNamespace)(window),t.getScriptStringForSettingGlobalVars=function(){return[";(function (w) {","var ns = (".concat(t.addAdfoxNamespace.toString()
2023-12-31 23:36:22 UTC	3907	IN	Data Raw: 46 33 43 0d 0a 68 69 73 2e 5f 63 6f 6e 74 61 69 6e 65 72 3d 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 6e 6f 64 65 7d 65 6c 73 65 7b 76 61 72 20 63 3d 28 30 2c 6e 28 37 33 31 35 30 29 2e 69 6e 69 74 52 65 6e 64 65 72 44 6f 6d 4e 6f 64 65 29 28 69 29 7c 7c 22 22 3b 74 68 69 73 2e 5f 63 6f 6e 74 61 69 6e 65 72 3d 28 30 2c 6e 28 35 39 38 39 29 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 29 28 63 29 7d 7d 74 68 69 73 2e 73 68 6f 75 6c 64 53 68 6f 77 53 74 69 63 6b 79 41 64 3d 21 31 2c 74 68 69 73 2e 61 75 74 6f 43 6c 6f 73 65 44 65 6c 61 79 3d 74 2e 66 75 6c 6c 73 63 72 65 65 6e 44 75 72 61 74 69 6f 6e 7c 7c 31 30 2c 74 2e 66 75 6c 6c 73 63 72 65 65 6e 44 75 72 61 74 69 6f 6e 26 26 6e 28 34 39 38 37 34 29 2e 6c 6f 67 67 65 72 2e 74 72 61 63 65 4c 6f Data Ascii: F3Chis._container=null==a?void 0:a.node}else{var c=(0,n(73150).initRenderDomNode)(i)\|\|"";this._container=(0,n(5989).getElementById)(c)}}this.shouldShowStickyAd=!1,this.autoCloseDelay=t.fullscreenDuration\|\|10,t.fullscreenDuration&&n(49874).logger.traceLo
2023-12-31 23:36:22 UTC	4276	IN	Data Raw: 31 30 41 43 0d 0a 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 73 28 22 49 6e 63 6f 72 72 65 63 74 20 64 61 74 61 20 74 79 70 65 22 29 3b 61 26 26 28 30 2c 6e 28 39 31 37 30 39 29 2e 72 65 6d 6f 76 65 4e 6f 64 65 46 72 6f 6d 50 61 72 65 6e 74 29 28 61 29 2c 74 2e 5f 70 72 6f 63 65 73 73 52 65 73 70 6f 6e 73 65 44 61 74 61 28 65 29 7d 2c 28 30 2c 6e 28 34 39 38 32 30 29 2e 78 29 28 65 29 26 26 28 65 3d 28 30 2c 6e 28 34 39 38 32 30 29 2e 4a 78 29 28 65 29 29 2c 65 3d 28 30 2c 6e 28 32 38 33 37 37 29 2e 61 64 64 50 61 72 61 6d 54 6f 55 72 6c 29 28 65 2c 22 63 61 6c 6c 62 61 63 6b 22 2c 22 59 61 5b 22 2e 63 6f 6e 63 61 74 28 72 2c 22 5d 22 29 29 2c 65 3d 28 30 2c 6e 28 34 39 38 32 30 29 2e 63 76 29 28 65 29 2c 6e Data Ascii: 10ACobject"!=typeof e)return void s("Incorrect data type");a&&(0,n(91709).removeNodeFromParent)(a),t._processResponseData(e)},(0,n(49820).x)(e)&&(e=(0,n(49820).Jx)(e)),e=(0,n(28377).addParamToUrl)(e,"callback","Ya[".concat(r,"]")),e=(0,n(49820).cv)(e),n
2023-12-31 23:36:22 UTC	3899	IN	Data Raw: 46 33 34 0d 0a 64 3a 74 68 69 73 2e 5f 6f 77 6e 65 72 49 64 2c 69 6e 73 65 72 74 69 6f 6e 43 6f 64 65 50 61 72 61 6d 73 3a 74 68 69 73 2e 5f 69 6e 73 65 72 74 69 6f 6e 43 6f 64 65 50 61 72 61 6d 73 2c 69 73 50 72 65 6c 6f 61 64 3a 74 68 69 73 2e 5f 69 73 50 72 65 6c 6f 61 64 2c 69 6e 69 74 54 69 6d 65 3a 4e 75 6d 62 65 72 28 6e 65 77 20 44 61 74 65 29 2c 72 65 66 72 65 73 68 3a 74 68 69 73 2e 5f 72 65 6c 6f 61 64 43 6f 75 6e 74 65 72 3e 30 2c 61 64 66 6f 78 43 6f 6e 74 61 69 6e 65 72 49 64 3a 74 68 69 73 2e 5f 63 6f 6e 74 61 69 6e 65 72 49 64 2c 6f 66 66 73 65 74 3a 74 68 69 73 2e 6f 66 66 73 65 74 2c 7a 49 6e 64 65 78 3a 74 68 69 73 2e 7a 49 6e 64 65 78 2c 63 61 6e 53 68 6f 77 53 74 69 63 6b 79 41 64 3a 74 68 69 73 2e 69 73 53 74 69 63 6b 79 41 64 26 26 Data Ascii: F34d:this._ownerId,insertionCodeParams:this._insertionCodeParams,isPreload:this._isPreload,initTime:Number(new Date),refresh:this._reloadCounter>0,adfoxContainerId:this._containerId,offset:this.offset,zIndex:this.zIndex,canShowStickyAd:this.isStickyAd&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49769	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:21 UTC	524	OUT	GET /ads/system/context.js HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:22 UTC	1473	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600 Connection: Close Content-Type: text/javascript; charset=utf-8 Expires: Mon, 01 Jan 2024 00:36:21 GMT Keep-Alive: timeout=600 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; Expires=Tue, 30-Dec-2025 23:36:21 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=5002853841704065781; Expires=Tue, 30-Dec-2025 23:36:21 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=9687945181704065781; Path=/; Domain=.yandex.ru; Expires=Mon, 30 Dec 2024 23:36:21 GMT; SameSite=None; Secure; HttpOnly Timing-Allow-Origin: * Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Robots-Tag: noindex, noarchive, nofollow X-Yandex-Req-Id: 1704065781973749-4301063021200285384-balancer-l7leveler-kubr-yp-vla-20-BAL-175
2023-12-31 23:36:22 UTC	7551	IN	Data Raw: 31 44 37 37 0d 0a 2f 2a 21 20 76 3a 39 33 37 36 39 31 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 6c 6f 61 64 65 72 73 2f 63 6f 6e 74 65 78 74 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 Data Ascii: 1D77/! v:937691 b:default c:loaders/context /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pb
2023-12-31 23:36:22 UTC	207	IN	Data Raw: 43 39 0d 0a 22 5d 7d 29 3b 69 66 28 6f 3d 3d 3d 6e 5b 22 31 30 30 2d 54 48 22 5d 29 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 28 7b 70 72 69 63 65 3a 31 30 2a 72 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 30 2d 54 48 22 5d 7d 29 7d 72 65 74 75 72 6e 7b 70 72 69 63 65 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 29 2c 75 6e 69 74 3a 6f 7d 7d 2c 65 2e 63 6f 75 6e 74 43 70 6d 46 72 6f 6d 55 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 70 72 69 63 65 2c 6f 3d 74 2e 75 6e 69 74 3b 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 20 6e 5b 22 31 30 30 30 2d 54 48 22 5d 3a 72 65 74 75 72 0d 0a Data Ascii: C9"]});if(o===n["100-TH"])return e.increaseUnit({price:10*r,unit:n["1000-TH"]})}return{price:Math.floor(r),unit:o}},e.countCpmFromUnit=function(t){var r=t.price,o=t.unit;switch(o){case n["1000-TH"]:retur
2023-12-31 23:36:22 UTC	1094	IN	Data Raw: 34 33 46 0d 0a 6e 20 65 2e 63 6f 75 6e 74 43 70 6d 46 72 6f 6d 55 6e 69 74 28 7b 70 72 69 63 65 3a 72 2f 31 30 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 2d 54 48 22 5d 7d 29 3b 63 61 73 65 20 6e 5b 22 31 30 30 2d 54 48 22 5d 3a 72 65 74 75 72 6e 20 65 2e 63 6f 75 6e 74 43 70 6d 46 72 6f 6d 55 6e 69 74 28 7b 70 72 69 63 65 3a 72 2f 31 30 30 2c 75 6e 69 74 3a 6e 5b 22 31 2d 54 48 22 5d 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7b 70 72 69 63 65 3a 4e 75 6d 62 65 72 28 72 2e 74 6f 46 69 78 65 64 28 33 29 29 2c 75 6e 69 74 3a 6f 7d 7d 7d 2c 65 2e 69 73 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 65 2e 74 6f 46 69 78 65 64 28 33 29 29 25 31 3d 3d 30 7d 2c 65 7d 28 29 3b 74 2e 43 6f 73 74 3d 6f 7d 2c 39 33 31 30 Data Ascii: 43Fn e.countCpmFromUnit({price:r/10,unit:n["100-TH"]});case n["100-TH"]:return e.countCpmFromUnit({price:r/100,unit:n["1-TH"]});default:return{price:Number(r.toFixed(3)),unit:o}}},e.isInt=function(e){return Number(e.toFixed(3))%1==0},e}();t.Cost=o},9310
2023-12-31 23:36:22 UTC	6873	IN	Data Raw: 31 41 44 31 0d 0a 3d 65 2e 61 72 67 73 3b 72 65 74 75 72 6e 22 61 75 63 74 69 6f 6e 45 6e 64 22 3d 3d 3d 6e 26 26 2d 31 21 3d 3d 72 2e 61 64 55 6e 69 74 43 6f 64 65 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 29 29 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 69 3f 6f 5b 69 2d 31 5d 3a 6e 75 6c 6c 7d 2c 74 2e 74 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 3d 65 2e 61 72 67 73 2c 69 3d 6f 2e 6e 6f 42 69 64 73 2c 61 3d 6f 2e 62 69 64 73 52 65 63 65 69 76 65 64 2c 73 3d 6f 2e 62 69 64 64 65 72 52 65 71 75 65 73 74 73 2c 63 3d 28 30 2c 6e 28 39 34 33 32 30 29 2e 66 69 6c 74 65 72 29 28 61 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 64 55 6e 69 74 43 6f 64 65 3d 3d 3d 74 7d 29 29 2c 75 3d 28 30 2c 6e 28 39 Data Ascii: 1AD1=e.args;return"auctionEnd"===n&&-1!==r.adUnitCodes.indexOf(t)})),i=o.length;return i?o[i-1]:null},t.ti=function(e,t){var o=e.args,i=o.noBids,a=o.bidsReceived,s=o.bidderRequests,c=(0,n(94320).filter)(a,(function(e){return e.adUnitCode===t})),u=(0,n(9
2023-12-31 23:36:22 UTC	222	IN	Data Raw: 44 38 0d 0a 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 72 28 74 2c 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 74 7d 28 6e 28 33 32 34 31 34 29 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 21 69 2e 69 73 50 61 73 73 69 76 65 45 76 65 6e 74 73 53 75 70 70 6f 0d 0a Data Ascii: D8e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,e,n);return o(t,e),t}(n(32414));function a(e,t,n,r){void 0===r&&(r=!1),e.addEventListener?e.addEventListener(t,n,!!i.isPassiveEventsSuppo
2023-12-31 23:36:22 UTC	1764	IN	Data Raw: 36 44 44 0d 0a 72 74 65 64 26 26 72 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 21 31 29 3a 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 74 2e 61 64 64 45 76 65 6e 74 3d 61 2c 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 73 2c 74 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 2c 6e 2c 72 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 65 2c 74 2c 6e 29 7d 7d 2c 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 6f 70 50 72 6f 70 61 67 Data Ascii: 6DDrted&&r):e.attachEvent("on"+t,n)}function s(e,t,n){e.removeEventListener?e.removeEventListener(t,n,!1):e.detachEvent("on"+t,n)}t.addEvent=a,t.removeEvent=s,t.on=function(e,t,n,r){return a(e,t,n,r),function(){s(e,t,n)}},t.stop=function(e){e.stopPropag
2023-12-31 23:36:22 UTC	6188	IN	Data Raw: 31 38 32 34 0d 0a 2e 77 29 28 7b 70 72 6f 6a 65 63 74 3a 22 61 64 66 6f 78 22 2c 73 65 71 75 65 6e 74 69 61 6c 4c 6f 61 64 69 6e 67 3a 74 2e 73 65 71 75 65 6e 74 69 61 6c 4c 6f 61 64 69 6e 67 7d 29 2e 61 64 64 42 79 44 69 6d 65 6e 73 69 6f 6e 4f 62 73 65 72 76 65 72 28 64 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 28 30 2c 6e 28 39 34 35 33 32 29 2e 6f 6e 63 65 29 28 65 29 2c 6f 3d 74 2e 6f 6e 52 65 6e 64 65 72 2c 61 3d 74 2e 6f 6e 45 72 72 6f 72 2c 73 3d 74 2e 6f 6e 53 74 75 62 3b 74 2e 6f 6e 52 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 28 30 2c 6e 28 32 36 Data Ascii: 1824.w)({project:"adfox",sequentialLoading:t.sequentialLoading}).addByDimensionObserver(d,(function(e){var r=(0,n(94532).once)(e),o=t.onRender,a=t.onError,s=t.onStub;t.onRender=function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];(0,n(26
2023-12-31 23:36:22 UTC	237	IN	Data Raw: 45 37 0d 0a 31 29 2e 74 65 73 74 50 72 6f 70 65 72 74 79 29 28 22 64 69 73 70 6c 61 79 3a 66 6c 65 78 22 29 7c 7c 21 6e 28 37 31 32 33 32 29 2e 48 7c 7c 21 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 7d 2c 35 35 30 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 67 65 74 53 63 72 69 70 74 53 74 72 69 6e 67 46 6f 72 53 65 74 74 69 6e 67 47 6c 6f 62 61 6c 56 61 72 73 3d 74 2e 6e 73 3d 74 2e 61 64 64 41 64 66 6f 78 4e 61 6d 65 73 70 61 63 65 3d 76 6f 69 64 20 30 2c 74 2e 61 64 64 41 64 66 6f 78 4e 61 6d 65 73 0d 0a Data Ascii: E71).testProperty)("display:flex")\|\|!n(71232).H\|\|!window.Promise},55063:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getScriptStringForSettingGlobalVars=t.ns=t.addAdfoxNamespace=void 0,t.addAdfoxNames
2023-12-31 23:36:22 UTC	2434	IN	Data Raw: 39 37 42 0d 0a 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 59 61 7c 7c 28 65 2e 59 61 3d 7b 7d 29 2c 65 2e 59 61 2e 61 64 66 6f 78 43 6f 64 65 7c 7c 28 65 2e 59 61 2e 61 64 66 6f 78 43 6f 64 65 3d 7b 7d 29 2c 65 2e 59 61 2e 61 64 66 6f 78 43 6f 64 65 7d 2c 74 2e 6e 73 3d 28 30 2c 74 2e 61 64 64 41 64 66 6f 78 4e 61 6d 65 73 70 61 63 65 29 28 77 69 6e 64 6f 77 29 2c 74 2e 67 65 74 53 63 72 69 70 74 53 74 72 69 6e 67 46 6f 72 53 65 74 74 69 6e 67 47 6c 6f 62 61 6c 56 61 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 22 3b 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 22 2c 22 76 61 72 20 6e 73 20 3d 20 28 22 2e 63 6f 6e 63 61 74 28 74 2e 61 64 64 41 64 66 6f 78 4e 61 6d 65 73 70 61 63 65 2e 74 6f 53 74 72 69 Data Ascii: 97Bpace=function(e){return e.Ya\|\|(e.Ya={}),e.Ya.adfoxCode\|\|(e.Ya.adfoxCode={}),e.Ya.adfoxCode},t.ns=(0,t.addAdfoxNamespace)(window),t.getScriptStringForSettingGlobalVars=function(){return[";(function (w) {","var ns = (".concat(t.addAdfoxNamespace.toStri
2023-12-31 23:36:22 UTC	5503	IN	Data Raw: 31 35 37 37 0d 0a 74 4d 6f 64 65 2c 74 68 69 73 2e 5f 75 73 65 50 72 6f 74 65 63 74 4d 6f 64 65 3d 21 28 30 2c 6e 28 36 32 37 36 33 29 2e 69 73 49 6e 53 61 66 65 66 72 61 6d 65 29 28 74 68 69 73 2e 5f 77 69 6e 29 26 26 28 74 2e 75 73 65 50 72 6f 74 65 63 74 4d 6f 64 65 7c 7c 74 68 69 73 2e 5f 69 73 54 75 72 62 6f 29 2c 74 68 69 73 2e 5f 63 73 70 4e 6f 6e 63 65 3d 74 2e 63 73 70 4e 6f 6e 63 65 2c 74 68 69 73 2e 5f 62 61 6e 6e 65 72 49 64 3d 74 2e 62 61 6e 6e 65 72 49 64 2c 74 68 69 73 2e 5f 65 72 72 6f 72 73 4c 6f 67 3d 5b 5d 2c 74 68 69 73 2e 5f 72 65 6c 6f 61 64 43 6f 75 6e 74 65 72 3d 74 2e 72 65 6c 6f 61 64 43 6f 75 6e 74 65 72 7c 7c 30 2c 74 68 69 73 2e 5f 73 6c 6f 74 4e 75 6d 62 65 72 3d 74 2e 73 6c 6f 74 4e 75 6d 62 65 72 7c 7c 2d 31 2c 74 68 69 73 Data Ascii: 1577tMode,this._useProtectMode=!(0,n(62763).isInSafeframe)(this._win)&&(t.useProtectMode\|\|this._isTurbo),this._cspNonce=t.cspNonce,this._bannerId=t.bannerId,this._errorsLog=[],this._reloadCounter=t.reloadCounter\|\|0,this._slotNumber=t.slotNumber\|\|-1,this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49772	87.250.251.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:21 UTC	520	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:22 UTC	1185	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 207125 Content-Type: application/javascript Date: Sun, 31 Dec 2023 23:36:22 GMT ETag: "658bd2fc-32915" Expires: Mon, 01 Jan 2024 00:36:22 GMT Last-Modified: Wed, 27 Dec 2023 07:32:12 GMT Set-Cookie: _yasc=jW+m1amwLG2geZoTJ4ygHgtAVCafEQQoVgd3yL2ZDAKJP+Zvx2MSJ4j1UK/zsoME; domain=.yandex.ru; path=/; expires=Wed, 28 Dec 2033 23:36:22 GMT; secure Set-Cookie: i=BovOl3E8mqjfVsIU3lXR5rFGdcMD0O2C3czw/GPxtPk7JsoQ1w3haoYRHkoBwBmw9NEjZFgFfdZbsp9hRfN4I4HKTPI=; Expires=Tue, 30-Dec-2025 23:36:21 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=801592611704065781; Expires=Tue, 30-Dec-2025 23:36:21 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2023-12-31 23:36:22 UTC	7016	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 54 65 28 61 2c 63 2c 62 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 41 28 77 69 6e 64 6f 77 2c 22 63 2e 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 75 29 7b 28 75 3d 55 65 28 6b 2c 6c 2c 22 22 2c 75 29 28 6b 2c 6c 29 29 26 26 28 61 61 28 75 2e 74 68 65 6e 29 3f 75 2e 74 68 65 6e 28 67 29 3a 67 28 75 29 29 3b 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 67 28 75 29 7b 75 26 26 28 61 61 28 75 29 3f 6d 2e 70 75 73 68 28 75 29 3a 75 61 28 75 29 26 26 79 28 66 75 6e 63 74 69 6f 6e 28 42 29 7b 76 61 72 20 4e 3d 42 5b 30 5d 3b 42 3d 42 5b 31 5d 3b 61 61 28 42 29 26 26 28 22 75 22 3d Data Ascii: (function(){try{(function(){function Te(a,c,b,d){var e=this;return A(window,"c.i",function(){function f(u){(u=Ue(k,l,"",u)(k,l))&&(aa(u.then)?u.then(g):g(u));return u}function g(u){u&&(aa(u)?m.push(u):ua(u)&&y(function(B){var N=B[0];B=B[1];aa(B)&&("u"=
2023-12-31 23:36:22 UTC	8168	IN	Data Raw: 63 29 3b 62 2e 44 28 22 70 75 22 2c 22 22 2b 69 63 28 64 29 2b 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 68 28 61 2c 63 2c 62 29 7b 63 3d 42 63 28 61 2c 76 6f 69 64 20 30 2c 63 29 3b 63 3d 72 68 28 61 2c 63 2e 43 28 22 70 68 63 5f 73 65 74 74 69 6e 67 73 22 29 7c 7c 22 22 29 3b 76 61 72 20 64 3d 6e 28 63 2c 22 63 6c 69 65 6e 74 49 64 22 29 2c 65 3d 6e 28 63 2c 22 6f 72 64 65 72 49 64 22 29 2c 0a 66 3d 6e 28 63 2c 22 73 65 72 76 69 63 65 5f 69 64 22 29 2c 67 3d 6e 28 63 2c 22 70 68 6f 6e 65 73 22 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 64 26 26 65 26 26 67 26 26 66 3f 78 6d 28 61 2c 62 2e 6a 63 2c 7b 61 67 3a 7a 6d 7d 29 28 67 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 41 6d 28 62 2c 7b 7a 62 3a 64 2c 4d 62 3a 65 2c 53 66 3a Data Ascii: c);b.D("pu",""+ic(d)+a)}function qh(a,c,b){c=Bc(a,void 0,c);c=rh(a,c.C("phc_settings")\|\|"");var d=n(c,"clientId"),e=n(c,"orderId"),f=n(c,"service_id"),g=n(c,"phones")\|\|[];return d&&e&&g&&f?xm(a,b.jc,{ag:zm})(g).then(function(h){return Am(b,{zb:d,Mb:e,Sf:
2023-12-31 23:36:22 UTC	8168	IN	Data Raw: 22 63 68 65 63 6b 65 64 22 3d 3d 3d 62 26 26 4b 28 28 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 6e 29 3f 67 2e 76 61 6c 75 65 3d 63 2e 63 68 65 63 6b 65 64 3f 22 63 68 65 63 6b 65 64 22 3a 6e 75 6c 6c 3a 65 6e 2e 74 65 73 74 28 62 29 26 26 71 66 28 61 2c 63 29 26 26 28 67 2e 76 61 6c 75 65 3d 6e 75 6c 6c 29 3b 65 6c 73 65 20 69 66 28 22 49 4d 47 22 3d 3d 3d 66 26 26 22 73 72 63 22 3d 3d 3d 0a 62 29 28 65 3d 65 64 28 61 2c 63 29 29 3f 28 67 2e 6c 62 3d 65 2c 67 2e 76 61 6c 75 65 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 41 45 41 41 41 41 42 43 41 51 41 41 41 43 31 48 Data Ascii: "checked"===b&&K((c.getAttribute("type")\|\|"").toLowerCase(),dn)?g.value=c.checked?"checked":null:en.test(b)&&qf(a,c)&&(g.value=null);else if("IMG"===f&&"src"===b)(e=ed(a,c))?(g.lb=e,g.value="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1H
2023-12-31 23:36:22 UTC	8168	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 41 6e 28 61 29 7b 72 65 74 75 72 6e 5b 5b 31 32 39 2c 61 2e 69 6e 64 65 78 2c 57 5d 2c 5b 38 34 2c 61 2e 6e 6f 64 65 73 2c 58 68 5d 5d 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 61 29 7b 72 65 74 75 72 6e 5b 5b 32 31 30 2c 61 2e 61 74 74 72 69 62 75 74 65 73 2c 38 31 2c 62 61 2c 0a 31 34 35 2c 62 61 5d 2c 5b 31 32 39 2c 61 2e 69 6e 64 65 78 2c 57 5d 2c 5b 36 35 2c 61 2e 74 61 72 67 65 74 2c 57 5d 5d 7d 66 75 6e 63 74 69 6f 6e 20 51 6e 28 61 29 7b 72 65 74 75 72 6e 5b 5b 38 35 32 2c 61 2e 63 6f 6e 74 65 6e 74 2c 58 68 5d 2c 5b 37 38 35 2c 61 2e 74 61 62 49 64 2c 62 61 5d 2c 5b 37 30 35 2c 61 2e 72 65 63 6f 72 64 53 74 61 6d 70 2c 24 6e 5d 2c 5b 36 35 36 2c 61 2e 6c 6f 63 61 74 69 6f 6e 2c 61 6f 5d 2c 5b 35 39 32 2c 61 2e 76 69 65 77 70 Data Ascii: unction An(a){return[[129,a.index,W],[84,a.nodes,Xh]]}function Bn(a){return[[210,a.attributes,81,ba,145,ba],[129,a.index,W],[65,a.target,W]]}function Qn(a){return[[852,a.content,Xh],[785,a.tabId,ba],[705,a.recordStamp,$n],[656,a.location,ao],[592,a.viewp
2023-12-31 23:36:22 UTC	3430	IN	Data Raw: 5f 5f 79 6d 3d 28 66 3d 7b 7d 2c 66 2e 65 63 6f 6d 6d 65 72 63 65 3d 5b 64 5d 2c 66 29 2c 65 29 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 6f 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 21 31 2c 65 3d 22 22 3b 69 66 28 21 75 61 28 63 29 29 72 65 74 75 72 6e 20 71 62 28 62 2c 0a 22 22 2c 22 45 63 6f 6d 6d 65 72 63 65 20 64 61 74 61 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 64 3b 76 61 72 20 66 3d 63 2e 67 6f 6f 64 73 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 64 65 74 61 69 6c 22 3a 63 61 73 65 20 22 61 64 64 22 3a 63 61 73 65 20 22 72 65 6d 6f 76 65 22 3a 66 61 28 66 29 26 26 66 2e 6c 65 6e 67 74 68 3f 28 64 3d 51 6f 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 75 61 28 67 29 26 26 28 6a 61 28 67 2e 69 64 29 Data Ascii: __ym=(f={},f.ecommerce=[d],f),e)))}}function Po(a,c,b){var d=!1,e="";if(!ua(c))return qb(b,"","Ecommerce data should be an object"),d;var f=c.goods;switch(a){case "detail":case "add":case "remove":fa(f)&&f.length?(d=Qo(function(g){return ua(g)&&(ja(g.id)
2023-12-31 23:36:22 UTC	4738	IN	Data Raw: 43 68 69 6c 64 28 72 29 3b 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 76 61 72 20 42 3d 5b 22 63 6c 69 63 6b 22 2c 22 74 6f 75 63 68 73 74 61 72 74 22 5d 3b 68 3d 64 61 28 61 29 3b 6d 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 6c 3d 5b 68 2e 46 28 71 2c 42 2c 62 29 2c 68 2e 46 28 74 2c 42 2c 62 29 2c 68 2e 46 28 66 2c 5b 22 6c 6f 61 64 22 5d 2c 44 28 5b 69 61 2c 5b 49 28 72 2e 72 65 6d 6f 76 65 43 68 69 6c 64 2c 72 2c 66 29 2c 49 28 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 2c 6c 2c 71 29 5d 5d 2c 79 29 29 2c 68 2e 46 28 75 2c 5b 22 6c 6f 61 64 22 5d 2c 49 28 72 2e 72 65 6d 6f 76 65 43 68 69 6c 64 2c 72 2c 70 29 29 2c 49 28 6d 2e 72 65 6d 6f 76 65 43 68 69 6c 64 2c 6d 2c 6b 29 5d 3b 0a 76 61 72 20 4e 3d 44 28 5b 69 61 2c 6c 5d 2c 79 29 3b 6c Data Ascii: Child(r);l.appendChild(t);var B=["click","touchstart"];h=da(a);m=a.document.body;l=[h.F(q,B,b),h.F(t,B,b),h.F(f,["load"],D([ia,[I(r.removeChild,r,f),I(l.appendChild,l,q)]],y)),h.F(u,["load"],I(r.removeChild,r,p)),I(m.removeChild,m,k)];var N=D([ia,l],y);l
2023-12-31 23:36:22 UTC	8168	IN	Data Raw: 29 2c 56 63 3a 63 7d 29 3b 72 65 74 75 72 6e 20 61 7d 2c 7b 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 69 28 61 2c 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 64 3d 61 2e 73 70 6c 69 74 28 22 22 29 2c 65 3d 63 2e 73 70 6c 69 74 28 22 22 29 2c 0a 66 3d 30 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 26 26 21 28 66 3e 3d 65 2e 6c 65 6e 67 74 68 29 3b 67 2b 3d 31 29 7b 76 61 72 20 68 3d 64 5b 67 5d 3b 22 30 22 3c 3d 68 26 26 22 39 22 3e 3d 68 3f 28 62 2e 70 75 73 68 28 65 5b 66 5d 29 2c 66 2b 3d 31 29 3a 62 2e 70 75 73 68 28 64 5b 67 5d 29 7d 72 65 74 75 72 6e 20 4f 28 22 22 2c 62 29 2b 63 2e 73 6c 69 63 65 28 66 2b 31 29 7d 66 75 6e 63 74 69 6f 6e 20 42 69 28 61 29 7b 76 61 72 20 63 3d 7b 37 3a 22 38 22 2c 38 3a 22 37 22 7d 3b 72 65 74 75 72 6e 20 31 31 3d Data Ascii: ),Vc:c});return a},{})}function Ai(a,c){for(var b=[],d=a.split(""),e=c.split(""),f=0,g=0;g<a.length&&!(f>=e.length);g+=1){var h=d[g];"0"<=h&&"9">=h?(b.push(e[f]),f+=1):b.push(d[g])}return O("",b)+c.slice(f+1)}function Bi(a){var c={7:"8",8:"7"};return 11=
2023-12-31 23:36:22 UTC	8168	IN	Data Raw: 69 63 65 28 30 2c 64 29 3b 72 65 74 75 72 6e 7b 4b 67 3a 62 2c 62 63 3a 63 2c 52 3a 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 3f 61 5b 30 5d 3a 45 63 28 64 29 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 63 28 61 2c 63 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 3d 44 28 5b 61 2c 64 2c 65 5d 2c 4a 66 29 3b 72 65 74 75 72 6e 20 62 2e 74 68 65 6e 28 66 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 28 29 3b 6a 65 28 61 2c 63 2c 67 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 66 28 61 2c 63 29 7b 72 65 74 75 72 6e 7b 4e 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 3d 28 62 2e 4d 7c 7c 7b 7d 29 2e 52 2c 68 3d 62 2e 5a 3b 68 3d 76 6f 69 64 20 30 3d 3d 3d 68 3f 7b 7d 3a 68 3b 69 66 28 67 26 26 28 51 69 28 63 2c 67 29 2c 21 68 2e 61 61 26 26 62 2e 4b 26 26 Data Ascii: ice(0,d);return{Kg:b,bc:c,R:1===d.length?a[0]:Ec(d)}}}function Jc(a,c,b,d,e){var f=D([a,d,e],Jf);return b.then(f,function(g){f();je(a,c,g)})}function Kf(a,c){return{N:function(b,d){var e,f,g=(b.M\|\|{}).R,h=b.Z;h=void 0===h?{}:h;if(g&&(Qi(c,g),!h.aa&&b.K&&
2023-12-31 23:36:22 UTC	8168	IN	Data Raw: 2c 66 2e 64 69 72 5d 29 2c 65 29 3b 72 65 74 75 72 6e 7b 6d 65 74 61 3a 66 2c 56 66 3a 69 62 28 61 2c 67 29 7c 7c 22 22 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 62 28 61 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 6e 28 63 2c 0a 64 29 3f 65 28 29 3a 52 28 61 2c 76 28 65 2c 62 29 2c 31 30 30 29 7d 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 61 29 3b 76 61 72 20 64 3d 28 63 2e 6e 6f 64 65 54 79 70 65 3f 22 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 22 3a 22 22 29 2b 22 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 22 3b 72 65 74 75 72 6e 20 43 61 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 62 28 66 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 64 28 61 2c 63 29 7b 76 61 72 20 62 3d 63 2e 4f 64 2c 64 3d 62 7c 7c 22 75 69 64 22 3b 62 3d 62 3f 61 2e 6c 6f 63 61 Data Ascii: ,f.dir]),e);return{meta:f,Vf:ib(a,g)\|\|""}}}function Fb(a,c){function b(e){n(c,d)?e():R(a,v(e,b),100)}void 0===c&&(c=a);var d=(c.nodeType?"contentWindow.":"")+"document.body";return Ca(function(e,f){b(f)})}function zd(a,c){var b=c.Od,d=b\|\|"uid";b=b?a.loca
2023-12-31 23:36:22 UTC	8168	IN	Data Raw: 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 6a 28 61 2c 63 2c 62 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 30 29 3b 0a 76 6f 69 64 20 30 3d 3d 3d 66 26 26 28 66 3d 30 29 3b 76 61 72 20 68 3d 7a 28 7b 66 61 3a 5b 5d 7d 2c 64 2e 5a 29 2c 6b 3d 63 5b 66 5d 2c 6c 3d 6b 5b 30 5d 3b 6b 3d 6b 5b 31 5d 3b 76 61 72 20 6d 3d 62 5b 65 5d 3b 68 2e 56 61 26 26 68 2e 56 61 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 7c 7c 21 68 2e 61 61 7c 7c 28 68 2e 56 61 3d 7a 28 7b 7d 2c 68 2e 56 61 2c 28 67 3d 7b 7d 2c 67 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 2c 67 29 29 2c 68 2e 61 61 3d 22 73 69 74 65 2d 69 6e 66 6f 3d 22 Data Ascii: }}function wj(a,c,b,d,e,f){var g;void 0===e&&(e=0);void 0===f&&(f=0);var h=z({fa:[]},d.Z),k=c[f],l=k[0];k=k[1];var m=b[e];h.Va&&h.Va["Content-Type"]\|\|!h.aa\|\|(h.Va=z({},h.Va,(g={},g["Content-Type"]="application/x-www-form-urlencoded",g)),h.aa="site-info="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49775	23.47.48.97	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:22 UTC	637	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: community.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:22 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:34:54 GMT ETag: "5fb45e1e-e64" Access-Control-Allow-Origin: * Date: Sun, 31 Dec 2023 23:36:22 GMT Content-Length: 3684 Connection: close
2023-12-31 23:36:22 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49782	23.47.52.50	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:23 UTC	407	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: community.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:23 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:34:54 GMT ETag: "5fb45e1e-e64" Access-Control-Allow-Origin: * Date: Sun, 31 Dec 2023 23:36:23 GMT Content-Length: 3684 Connection: close
2023-12-31 23:36:23 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49792	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:24 UTC	572	OUT	GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:25 UTC	793	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:24 GMT Content-Type: font/woff2 Content-Length: 26004 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31556952 Etag: "7f0cdaf91230f9789ca4162aedff612e" Expires: Tue, 31 Dec 2024 05:24:25 GMT Last-Modified: Mon, 25 Apr 2022 14:02:39 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Amz-Meta-Owner: {"role":"admin","login":"4eb0da"} X-Nginx-Request-Id: 8fa2be2a4f8623fe Accept-Ranges: bytes
2023-12-31 23:36:25 UTC	15591	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 65 94 00 14 00 00 00 00 e2 4c 00 00 65 20 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 02 1b 83 7a 1c 89 1a 3f 48 56 41 52 89 37 3f 4d 56 41 52 33 06 60 3f 53 54 41 54 1c 00 8a 28 2f 3c 11 08 0a 81 da 2c 81 ac 67 0b 88 1a 00 30 81 a2 16 01 36 02 24 03 90 30 04 20 05 87 59 07 20 0c 07 1b 0e c6 25 ec 26 33 bd 59 65 12 42 6f 8e 02 a2 28 61 b5 11 36 12 21 6c 1c 10 cc 41 ae ec ff cf 3a 36 64 34 8e bc 03 d8 e6 4c fd 2a a0 68 a4 8c 22 86 65 01 05 69 99 8c 26 c7 2c a5 cd b6 c1 35 cb b2 57 57 09 8a 76 e6 4e da c6 8b 76 12 15 10 04 55 c5 c4 fe 36 49 c6 3e 5d 4e 97 c4 80 01 27 69 5b 9e 8c ee a2 a7 90 7b d3 65 c8 49 47 0f 0e 93 09 ae f1 7e 66 5d db 3e dd 63 bd bd ad db 7b f5 83 09 72 68 af 2a 2e fc 75 22 Data Ascii: wOF2eLe z?HVAR7?MVAR3`?STAT(/<,g06$0 Y %&3YeBo(a6!lA:6d4Lh"ei&,5WWvNvU6I>]N'i[{eIG~f]>c{rh.u"
2023-12-31 23:36:25 UTC	10413	IN	Data Raw: c8 6d 4f 7f 51 f4 74 82 b2 50 7e a8 b2 96 a3 9c 25 8c 6d 48 44 48 cc db 1c 9d ce 36 ef 0c d6 d0 98 72 00 a6 be da 5e be 40 38 bf a9 62 81 e3 7b 58 69 4f 9f 2a 8f 6b 6d 6d 2b 6f f5 1c 12 18 d2 9a 56 b9 27 f1 52 6e fa 23 41 73 6d 3c 90 34 af 04 bf a7 bb 9b 30 60 4b 4f b4 d6 52 b8 1d e8 50 55 ad a1 2b c4 05 b0 30 22 6f 79 69 72 d8 9e 8c ce b9 b5 06 8b 60 72 20 93 0e db e8 f5 a1 c7 53 e9 ec 2e c4 ac dd 0a 3a 54 3c 9d a4 6c 6a ad aa c0 33 d3 a0 eb c3 b7 e2 ba dd e7 67 82 d3 4c 23 02 1d 76 98 30 ce 84 52 9b dc de bf 0b 36 50 69 04 d2 3b 55 c5 ac 0c 91 c1 98 14 ca 10 01 99 44 0f d6 d1 79 e0 af 36 95 77 9b 4d a1 a7 61 04 1c c8 d4 e7 18 3f 4d 77 c7 7d b2 39 be fb f8 99 11 4a 1a 76 b5 87 d6 b7 28 81 5b 80 3c 4c 89 32 53 43 0b 1a 88 c1 37 61 32 6b 0b 53 e6 b3 77 70 Data Ascii: mOQtP~%mHDH6r^@8b{XiO*kmm+oV'Rn#Asm<40`KORPU+0"oyir`r S.:T<lj3gL#v0R6Pi;UDy6wMa?Mw}9Jv([<L2SC7a2kSwp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49793	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:24 UTC	10591	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&imp-id=1&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=79867447&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A347%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B7174798202954%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:25 UTC	1346	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065785109848-8877945370966638567-balancer-l7leveler-kubr-yp-vla-67-BAL-2173 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:36:25 GMT expires: Sun, 31 Dec 2023 23:36:25 GMT last-modified: Sun, 31 Dec 2023 23:36:25 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:36:25 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:36:25 UTC	4288	IN	Data Raw: 31 30 42 38 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 37 37 33 35 35 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 36 39 33 37 38 35 38 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 Data Ascii: 10B8{"impressionData":{"currency":"RUB","revenueUSD":"0.000077355","precision":"estimated","revenue":"0.006937858"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836
2023-12-31 23:36:25 UTC	3074	IN	Data Raw: 42 46 42 0d 0a 74 22 3a 22 23 46 46 46 46 46 46 22 2c 22 74 6f 70 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 63 6c 61 73 73 69 66 69 65 72 73 22 3a 7b 22 61 65 73 74 68 65 74 69 63 22 3a 31 34 34 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 31 30 33 31 31 32 34 34 2f 70 69 63 62 34 66 63 39 37 64 35 66 39 32 34 61 31 32 62 32 38 36 66 63 30 34 34 32 64 37 32 64 30 32 31 2f 68 75 67 65 58 22 2c 22 36 37 38 22 2c 22 36 33 38 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 32 30 38 2c 22 68 22 3a 32 31 31 2c 22 78 22 3a 30 2c 22 77 22 3a 36 37 34 7d 2c 7b 22 79 22 3a 31 37 36 2c 22 68 22 3a 33 38 31 2c 22 Data Ascii: BFBt":"#FFFFFF","top":"#FFFFFF"},"classifiers":{"aesthetic":144}}],["https://avatars.mds.yandex.net/get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/hugeX","678","638",{"smart-centers":[{"y":208,"h":211,"x":0,"w":674},{"y":176,"h":381,"
2023-12-31 23:36:25 UTC	5109	IN	Data Raw: 31 33 45 44 0d 0a 47 4c 44 62 76 49 65 70 68 6f 6b 59 71 50 65 74 30 35 4a 44 63 53 32 76 50 41 4b 53 51 31 4b 4d 58 37 68 70 55 75 43 31 58 74 37 30 76 75 61 67 47 4a 48 71 67 58 30 71 54 62 77 41 38 6a 61 57 35 39 55 4d 62 47 30 54 52 47 63 64 63 58 66 51 4d 62 66 51 55 64 69 63 37 68 72 41 34 30 78 7a 51 38 67 47 33 6c 72 75 62 36 30 54 6b 65 72 4c 4f 33 4d 5a 6c 38 75 66 78 5a 71 64 61 75 57 57 36 74 67 6e 49 46 64 51 6f 38 46 55 7a 4d 53 4f 36 6d 67 66 70 69 33 55 70 59 4d 35 59 61 7a 65 4b 46 74 53 6d 49 55 34 7a 42 68 33 30 78 4d 79 75 4c 72 58 4b 4c 31 79 6b 59 35 6b 5f 36 32 75 45 49 42 76 37 32 49 49 44 46 58 70 4c 75 30 5a 74 41 50 32 53 70 76 56 43 44 61 75 74 4c 57 6d 74 56 32 31 6b 75 30 50 34 45 63 54 69 59 70 45 31 7a 51 33 4e 6c 70 42 43 Data Ascii: 13EDGLDbvIephokYqPet05JDcS2vPAKSQ1KMX7hpUuC1Xt70vuagGJHqgX0qTbwA8jaW59UMbG0TRGcdcXfQMbfQUdic7hrA40xzQ8gG3lrub60TkerLO3MZl8ufxZqdauWW6tgnIFdQo8FUzMSO6mgfpi3UpYM5YazeKFtSmIU4zBh30xMyuLrXKL1ykY5k_62uEIBv72IIDFXpLu0ZtAP2SpvVCDautLWmtV21ku0P4EcTiYpE1zQ3NlpBC
2023-12-31 23:36:25 UTC	3066	IN	Data Raw: 42 46 33 0d 0a 73 69 66 69 65 72 73 22 3a 7b 22 6c 6f 6f 6b 22 3a 32 2c 22 61 65 73 74 68 65 74 69 63 22 3a 31 34 37 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 35 31 31 37 39 37 39 2f 70 69 63 64 37 38 38 32 36 62 66 66 31 31 65 61 36 36 61 63 62 31 36 31 39 61 66 32 36 62 32 65 31 34 62 2f 68 75 67 65 58 22 2c 22 36 36 38 22 2c 22 36 34 36 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 31 39 37 2c 22 68 22 3a 32 31 30 2c 22 78 22 3a 30 2c 22 77 22 3a 36 36 37 7d 2c 7b 22 79 22 3a 31 38 37 2c 22 68 22 3a 33 37 35 2c 22 78 22 3a 31 2c 22 77 22 3a 36 36 36 7d 2c 7b 22 79 22 3a 30 2c 22 68 22 3a 36 34 Data Ascii: BF3sifiers":{"look":2,"aesthetic":147}}],["https://avatars.mds.yandex.net/get-yabs_performance/5117979/picd78826bff11ea66acb1619af26b2e14b/hugeX","668","646",{"smart-centers":[{"y":197,"h":210,"x":0,"w":667},{"y":187,"h":375,"x":1,"w":666},{"y":0,"h":64
2023-12-31 23:36:25 UTC	5117	IN	Data Raw: 31 33 46 35 0d 0a 69 48 77 69 70 6b 33 47 53 56 6e 57 32 54 39 41 61 36 71 44 32 66 47 54 42 4f 55 6f 59 38 50 65 39 49 4e 35 58 4c 30 37 51 73 39 39 72 66 51 4d 62 66 51 4d 5a 65 78 66 62 75 7a 32 6a 31 45 6c 51 57 41 71 34 77 7a 55 31 49 57 64 4e 66 44 35 51 32 72 65 70 70 45 41 49 77 7a 66 6e 43 38 4f 39 6a 77 79 53 5a 76 63 68 59 70 6d 65 4b 43 47 79 4d 52 71 76 73 31 46 48 6e 42 59 76 49 55 71 41 37 78 45 47 42 46 32 55 62 72 31 57 56 68 2d 53 41 77 6d 67 38 57 55 56 4a 32 74 4e 58 31 53 46 39 35 53 5a 58 39 66 45 64 6d 50 61 79 32 47 63 43 77 57 79 68 76 56 43 44 61 75 74 4c 57 6d 74 56 32 31 6b 75 30 50 34 45 63 54 69 59 70 45 31 7a 51 33 4e 6c 70 42 43 77 37 4c 69 44 73 77 69 4b 5a 57 36 73 36 6c 4f 58 50 35 66 38 43 4e 64 4a 51 6b 75 39 31 63 2d Data Ascii: 13F5iHwipk3GSVnW2T9Aa6qD2fGTBOUoY8Pe9IN5XL07Qs99rfQMbfQMZexfbuz2j1ElQWAq4wzU1IWdNfD5Q2reppEAIwzfnC8O9jwySZvchYpmeKCGyMRqvs1FHnBYvIUqA7xEGBF2Ubr1WVh-SAwmg8WUVJ2tNX1SF95SZX9fEdmPay2GcCwWyhvVCDautLWmtV21ku0P4EcTiYpE1zQ3NlpBCw7LiDswiKZW6s6lOXP5f8CNdJQku91c-
2023-12-31 23:36:25 UTC	3058	IN	Data Raw: 42 45 42 0d 0a 2c 22 74 6f 70 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 63 6c 61 73 73 69 66 69 65 72 73 22 3a 7b 22 6c 6f 6f 6b 22 3a 39 2c 22 61 65 73 74 68 65 74 69 63 22 3a 31 34 34 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 39 33 35 37 32 34 32 2f 70 69 63 63 63 38 62 31 35 64 31 62 66 63 66 35 61 32 36 34 32 36 39 61 61 38 61 33 33 66 38 31 33 31 37 2f 68 75 67 65 58 22 2c 22 36 36 33 22 2c 22 36 32 34 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 33 31 39 2c 22 68 22 3a 32 30 38 2c 22 78 22 3a 30 2c 22 77 22 3a 36 36 32 7d 2c 7b 22 79 22 3a 31 37 39 2c 22 68 22 3a 33 37 32 2c 22 78 22 3a 30 Data Ascii: BEB,"top":"#FFFFFF"},"classifiers":{"look":9,"aesthetic":144}}],["https://avatars.mds.yandex.net/get-yabs_performance/9357242/piccc8b15d1bfcf5a264269aa8a33f81317/hugeX","663","624",{"smart-centers":[{"y":319,"h":208,"x":0,"w":662},{"y":179,"h":372,"x":0
2023-12-31 23:36:25 UTC	5125	IN	Data Raw: 31 33 46 44 0d 0a 4c 41 45 63 37 49 59 45 39 55 6b 45 64 55 67 45 51 50 35 4a 5a 6a 61 74 59 58 58 38 44 67 6e 37 49 4b 54 31 71 49 4f 64 67 70 45 6b 77 51 38 4a 36 37 4a 31 62 53 6f 50 47 42 61 61 50 31 71 67 62 35 52 37 55 78 43 76 57 71 37 34 79 75 34 63 49 49 58 30 6a 5a 47 65 4b 64 51 73 37 69 61 57 36 41 45 4d 62 48 47 4c 47 48 73 6c 59 59 50 51 4d 62 66 51 4d 62 69 77 45 67 4c 55 46 30 68 48 4a 42 77 65 32 6a 35 43 6c 37 57 4c 65 66 72 76 4a 31 4d 5a 6a 41 38 7a 70 59 61 6c 6c 77 47 47 32 73 41 50 55 46 37 41 2d 39 6c 41 30 43 44 4b 62 4b 42 74 39 77 53 78 30 37 65 75 5f 58 39 61 56 6c 44 75 33 4c 72 67 61 7a 38 47 45 74 53 79 48 55 34 76 38 68 70 43 75 4d 43 79 4e 72 58 4b 4d 31 53 63 5a 35 2d 78 36 32 75 41 4a 42 76 42 33 49 49 39 44 58 70 54 78 Data Ascii: 13FDLAEc7IYE9UkEdUgEQP5JZjatYXX8Dgn7IKT1qIOdgpEkwQ8J67J1bSoPGBaaP1qgb5R7UxCvWq74yu4cIIX0jZGeKdQs7iaW6AEMbHGLGHslYYPQMbfQMbiwEgLUF0hHJBwe2j5Cl7WLefrvJ1MZjA8zpYallwGG2sAPUF7A-9lA0CDKbKBt9wSx07eu_X9aVlDu3Lrgaz8GEtSyHU4v8hpCuMCyNrXKM1ScZ5-x62uAJBvB3II9DXpTx
2023-12-31 23:36:25 UTC	3050	IN	Data Raw: 42 45 33 0d 0a 22 2c 22 74 6f 70 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 63 6c 61 73 73 69 66 69 65 72 73 22 3a 7b 22 6c 6f 6f 6b 22 3a 31 2c 22 61 65 73 74 68 65 74 69 63 22 3a 31 34 31 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 39 37 34 35 32 34 34 2f 70 69 63 37 33 61 62 62 31 34 63 36 31 33 34 30 66 65 66 33 64 64 38 35 31 65 66 63 30 65 30 32 66 32 34 2f 68 75 67 65 58 22 2c 22 35 38 33 22 2c 22 36 35 32 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 31 37 39 2c 22 68 22 3a 31 38 32 2c 22 78 22 3a 30 2c 22 77 22 3a 35 38 32 7d 2c 7b 22 79 22 3a 31 35 34 2c 22 68 22 3a 33 32 38 2c 22 78 22 3a Data Ascii: BE3","top":"#FFFFFF"},"classifiers":{"look":1,"aesthetic":141}}],["https://avatars.mds.yandex.net/get-yabs_performance/9745244/pic73abb14c61340fef3dd851efc0e02f24/hugeX","583","652",{"smart-centers":[{"y":179,"h":182,"x":0,"w":582},{"y":154,"h":328,"x":
2023-12-31 23:36:25 UTC	5133	IN	Data Raw: 31 34 30 35 0d 0a 74 35 32 59 4f 4a 4c 32 45 57 67 51 42 59 62 48 64 4e 62 54 35 75 74 47 6b 30 45 63 52 43 75 34 6f 59 4b 66 75 71 32 66 6a 32 42 4d 63 7a 71 50 33 33 67 45 31 70 6e 39 4b 57 63 59 66 4c 36 31 65 68 46 72 4b 31 52 39 30 41 4d 79 6a 41 57 30 77 63 58 44 46 44 37 49 71 6a 42 49 71 6a 42 50 43 56 4e 67 4b 4f 31 73 77 61 4c 4c 57 37 52 67 6e 51 43 30 78 54 48 68 67 57 32 6a 37 55 4c 6e 4a 64 37 66 46 50 72 30 30 44 6c 4b 59 71 56 45 72 6d 49 49 37 6e 61 67 69 38 34 30 61 39 70 6b 33 45 70 58 2d 34 45 75 2d 53 37 68 46 4e 32 62 48 4b 66 46 77 44 33 7a 37 38 37 64 58 46 47 77 57 75 46 72 56 36 35 54 4f 4c 36 47 46 37 68 58 52 68 6d 57 45 46 61 59 45 50 6d 61 71 64 48 75 69 7a 6a 34 31 6a 31 30 37 57 56 64 79 6d 73 4a 5a 54 55 31 33 54 79 39 36 Data Ascii: 1405t52YOJL2EWgQBYbHdNbT5utGk0EcRCu4oYKfuq2fj2BMczqP33gE1pn9KWcYfL61ehFrK1R90AMyjAW0wcXDFD7IqjBIqjBPCVNgKO1swaLLW7RgnQC0xTHhgW2j7ULnJd7fFPr00DlKYqVErmII7nagi840a9pk3EpX-4Eu-S7hFN2bHKfFwD3z787dXFGwWuFrV65TOL6GF7hXRhmWEFaYEPmaqdHuizj41j107WVdymsJZTU13Ty96
2023-12-31 23:36:25 UTC	3042	IN	Data Raw: 42 44 42 0d 0a 3a 22 23 46 46 46 46 46 46 22 2c 22 72 69 67 68 74 22 3a 22 23 46 46 46 46 46 46 22 2c 22 74 6f 70 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 63 6c 61 73 73 69 66 69 65 72 73 22 3a 7b 22 61 65 73 74 68 65 74 69 63 22 3a 31 33 36 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 31 30 33 31 34 37 30 34 2f 32 61 30 30 30 30 30 31 38 38 61 32 66 34 38 63 62 38 37 38 38 30 35 30 31 66 35 62 32 30 38 35 61 32 38 38 2f 68 75 67 65 58 22 2c 22 36 36 37 22 2c 22 36 32 39 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 32 30 35 2c 22 68 22 3a 32 30 38 2c 22 78 22 3a 30 2c 22 77 22 3a 36 36 35 7d 2c 7b Data Ascii: BDB:"#FFFFFF","right":"#FFFFFF","top":"#FFFFFF"},"classifiers":{"aesthetic":136}}],["https://avatars.mds.yandex.net/get-yabs_performance/10314704/2a00000188a2f48cb87880501f5b2085a288/hugeX","667","629",{"smart-centers":[{"y":205,"h":208,"x":0,"w":665},{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49787	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:24 UTC	582	OUT	GET /partner-code-bundles/937691/ae84bbbd1296b7622b03.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:25 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:25 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 14302 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "dcfa01563164e699212fcc8e2a8272d1" Expires: Wed, 31 Dec 2053 06:12:25 GMT Last-Modified: Wed, 27 Dec 2023 15:52:49 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2023-12-31 23:36:25 UTC	14302	IN	Data Raw: 2f 2a 21 20 76 3a 39 33 37 36 39 31 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 72 75 6d 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f Data Ascii: /! v:937691 b:default c:rum /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.proto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49789	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:24 UTC	582	OUT	GET /partner-code-bundles/937691/a6a4b083a73f3d813a26.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:25 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:25 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 24538 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "66c81e96d1574c9f51eb3d11978ef007" Expires: Wed, 31 Dec 2053 06:12:25 GMT Last-Modified: Wed, 27 Dec 2023 15:52:48 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2023-12-31 23:36:25 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 39 33 37 36 39 31 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 34 31 31 35 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 6e 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 6e 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 Data Ascii: /! v:937691 b:default c:4115 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const n=e.toString();return/\[native code\]/.test(n)\|\|/\/\* source code not available \*\//.test(n)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prot
2023-12-31 23:36:25 UTC	8921	IN	Data Raw: 74 69 6f 6e 20 41 28 65 2c 6e 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 75 2c 69 2c 63 2c 6c 2c 5f 3b 69 66 28 6f 3f 22 63 6c 61 73 73 4e 61 6d 65 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 6c 61 73 73 22 29 3a 22 63 6c 61 73 73 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 6c 61 73 73 4e 61 6d 65 22 29 2c 22 6b 65 79 22 3d 3d 3d 6e 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 6e 29 3b 65 6c 73 65 20 69 66 28 22 73 74 79 6c 65 22 3d 3d 3d 6e 29 69 66 28 75 3d 65 2e 73 74 79 6c 65 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 75 2e 63 73 73 54 65 78 74 3d 74 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 75 2e 63 73 73 54 65 78 74 3d 22 22 2c 72 3d 6e 75 6c 6c 29 2c 72 29 66 6f 72 28 69 20 69 6e 20 72 29 74 26 26 69 20 69 Data Ascii: tion A(e,n,t,r,o){var u,i,c,l,_;if(o?"className"===n&&(n="class"):"class"===n&&(n="className"),"key"===n\|\|"children"===n);else if("style"===n)if(u=e.style,"string"==typeof t)u.cssText=t;else{if("string"==typeof r&&(u.cssText="",r=null),r)for(i in r)t&&i i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49790	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:24 UTC	582	OUT	GET /partner-code-bundles/937691/a92bedce4b45bc60c7b9.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:25 UTC	768	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:25 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 120546 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "3295708de63d95c4c4e07a97d75ffc1b" Expires: Wed, 31 Dec 2053 06:12:25 GMT Last-Modified: Wed, 27 Dec 2023 15:52:48 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2023-12-31 23:36:25 UTC	15616	IN	Data Raw: 2f 2a 21 20 76 3a 39 33 37 36 39 31 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 61 64 66 6f 78 5f 62 61 6e 6e 65 72 73 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 Data Ascii: /! v:937691 b:default c:adfox_banners /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Func
2023-12-31 23:36:25 UTC	16384	IN	Data Raw: 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 74 79 70 65 3d 6e 28 35 30 35 35 34 29 2e 6a 2e 65 72 72 6f 72 2c 65 7d 72 65 74 75 72 6e 20 61 28 65 2c 74 29 2c 65 7d 28 73 29 3b 65 2e 51 30 3d 64 7d 2c 35 30 35 35 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3b 65 2e 6a 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 22 65 72 72 6f 72 22 5d 3d 22 65 72 72 6f 72 22 2c 74 5b 22 6e 61 74 69 76 65 22 5d 3d 22 6e 61 74 69 76 65 22 2c 74 5b 22 62 61 6e 6e 65 72 22 5d 3d 22 62 61 6e Data Ascii: ar d=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.type=n(50554).j.error,e}return a(e,t),e}(s);e.Q0=d},50554:function(t,e){"use strict";var n;e.j=void 0,function(t){t["error"]="error",t["native"]="native",t["banner"]="ban
2023-12-31 23:36:25 UTC	16384	IN	Data Raw: 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 69 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 62 61 6e 6e 65 72 3d 65 2e 42 61 6e 6e 65 72 44 66 70 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 22 64 61 74 61 2d 61 64 78 2d 61 64 66 6f 78 2d 69 64 22 2c 73 3d 5b 30 2c 31 2c 32 2c 33 2c 36 2c 31 30 5d 2c 63 3d 7b 7d 3b 28 30 2c 6e 28 31 35 31 33 37 29 2e 66 6f 72 45 61 63 68 29 28 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 5b 74 5d 3d 22 22 7d 29 29 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 72 2c 6f 2c 61 29 7b Data Ascii: ]);return t},i.apply(this,arguments)};Object.defineProperty(e,"__esModule",{value:!0}),e.banner=e.BannerDfp=void 0;var a="data-adx-adfox-id",s=[0,1,2,3,6,10],c={};(0,n(15137).forEach)(s,(function(t){return c[t]=""}));var u=function(t){function e(e,r,o,a){
2023-12-31 23:36:25 UTC	16384	IN	Data Raw: 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 7d 2c 72 28 74 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 Data Ascii: typeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},r(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+S
2023-12-31 23:36:26 UTC	16384	IN	Data Raw: 28 34 34 37 37 31 29 2e 73 65 74 53 74 79 6c 65 73 29 28 74 2c 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 7d 29 2c 65 2e 74 72 61 6e 73 66 6f 72 6d 7c 7c 28 30 2c 6e 28 34 34 37 37 31 29 2e 73 65 74 53 74 79 6c 65 73 29 28 74 2c 7b 74 72 61 6e 73 66 6f 72 6d 3a 22 74 72 61 6e 73 6c 61 74 65 5a 28 30 70 78 29 22 7d 29 7d 7d 2c 34 31 30 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 6f 20 69 Data Ascii: (44771).setStyles)(t,{position:"relative"}),e.transform\|\|(0,n(44771).setStyles)(t,{transform:"translateZ(0px)"})}},41073:function(t,e,n){"use strict";var r=function(){return r=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o i
2023-12-31 23:36:26 UTC	16384	IN	Data Raw: 54 5f 41 52 52 41 59 26 26 21 28 30 2c 69 2e 69 73 41 72 72 61 79 29 28 6e 29 29 72 65 74 75 72 6e 27 70 61 72 61 6d 20 22 27 2b 72 2b 27 22 20 6d 75 73 74 20 62 65 20 61 20 41 72 72 61 79 27 3b 69 66 28 65 2e 66 6f 72 6d 61 74 3d 3d 3d 6f 2e 46 4f 52 4d 41 54 5f 42 4f 4f 4c 45 41 4e 26 26 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 28 61 3d 6e 29 26 26 22 79 65 73 22 21 3d 3d 61 26 26 22 6e 6f 22 21 3d 3d 61 29 29 72 65 74 75 72 6e 27 70 61 72 61 6d 20 22 27 2b 72 2b 27 22 20 6d 75 73 74 20 62 65 20 6f 6e 6c 79 20 22 79 65 73 22 20 6f 72 20 22 6e 6f 22 27 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 6f 72 6d 61 74 3d 3d 3d 6f 2e 46 4f 52 4d 41 54 5f 49 4e 54 7d 28 65 29 26 26 21 66 75 6e 63 74 69 6f 6e 28 74 29 Data Ascii: T_ARRAY&&!(0,i.isArray)(n))return'param "'+r+'" must be a Array';if(e.format===o.FORMAT_BOOLEAN&&("boolean"!=typeof(a=n)&&"yes"!==a&&"no"!==a))return'param "'+r+'" must be only "yes" or "no"';if(function(t){return t.format===o.FORMAT_INT}(e)&&!function(t)
2023-12-31 23:36:26 UTC	16384	IN	Data Raw: 5f 70 62 69 6e 64 28 6e 75 6c 6c 2c 6e 29 29 5b 22 63 61 74 63 68 22 5d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 72 26 26 72 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 74 3d 30 2c 65 3d 72 2e 6c 65 6e 67 74 68 3b 74 3c 65 3b 74 2b 2b 29 72 5b 74 5d 26 26 72 5b 74 5d 2e 65 72 72 6f 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 69 3d 21 30 2c 72 3d 6e 75 6c 6c 7d 29 29 7d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3d 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6f 3f 74 28 6f 29 3a 28 69 26 26 61 28 29 2c 72 2e 70 75 73 68 28 7b 73 75 63 63 65 73 73 3a 74 2c 65 72 72 6f 72 3a 65 7d 29 29 7d 2c 61 28 29 7d 2c 33 34 35 30 38 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 Data Ascii: _pbind(null,n))["catch"]((function(){if(r&&r.length)for(var t=0,e=r.length;t<e;t++)r[t]&&r[t].error.apply(this,arguments);i=!0,r=null}))}t.exports=function(t,e){e=e\|\|function(){},o?t(o):(i&&a(),r.push({success:t,error:e}))},a()},34508:function(t,e,n){var
2023-12-31 23:36:26 UTC	6626	IN	Data Raw: 4d 72 61 69 64 28 6e 29 3b 72 65 74 75 72 6e 20 69 3f 28 30 2c 61 2e 63 68 65 63 6b 42 75 6e 64 6c 65 49 73 53 53 50 29 28 29 26 26 22 65 78 70 22 3d 3d 3d 28 30 2c 73 2e 75 73 65 45 78 70 65 72 69 6d 65 6e 74 46 6c 61 67 29 28 22 44 49 53 41 42 4c 45 5f 4d 52 41 49 44 5f 56 49 53 49 42 49 4c 49 54 59 5f 43 4f 4e 46 49 52 4d 5f 53 53 50 22 29 3f 6e 75 6c 6c 3a 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 78 70 6f 73 75 72 65 43 68 61 6e 67 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6c 29 7b 70 3d 21 31 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 63 5b 65 5d 28 74 29 7d 7d 29 29 2c 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 Data Ascii: Mraid(n);return i?(0,a.checkBundleIsSSP)()&&"exp"===(0,s.useExperimentFlag)("DISABLE_MRAID_VISIBILITY_CONFIRM_SSP")?null:(function(t){t.addEventListener("exposureChange",(function(t){if(l){p=!1;for(var e=0;e<c.length;e++)c[e](t)}})),t.addEventListener("vi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49788	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:24 UTC	561	OUT	GET /safeframe-bundles/0.83/host.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:25 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:25 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 33703 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "2435549eac66915d7464ee7b9efce038" Expires: Wed, 31 Dec 2053 06:12:25 GMT Last-Modified: Wed, 03 Nov 2021 13:42:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2023-12-31 23:36:25 UTC	15617	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2023-12-31 23:36:25 UTC	16384	IN	Data Raw: 63 65 6f 66 20 45 6c 65 6d 65 6e 74 3f 74 2e 63 6f 6e 66 2e 64 65 73 74 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2e 63 6f 6e 66 2e 64 65 73 74 29 29 26 26 6e 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 73 65 74 41 74 74 72 28 75 2c 22 69 64 22 2c 74 2e 63 6f 6e 66 2e 64 65 73 74 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 7d 6c 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 52 65 61 64 79 28 6e 65 77 20 63 2e 50 6f 73 69 74 69 6f 6e 28 74 29 29 7d 65 6c 73 65 20 73 2e 6c 6f 67 45 72 72 6f 72 28 22 6e 6f 20 63 6f 6e 74 65 6e 74 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 69 6e 6c 69 6e 65 20 70 6f 73 69 74 69 6f 6e 20 6f 62 6a Data Ascii: ceof Element?t.conf.dest:document.getElementById(t.conf.dest))&&n){var u=document.createElement("div");i.setAttr(u,"id",t.conf.dest),n.appendChild(u)}l.status.setPositionReady(new c.Position(t))}else s.logError("no content found in the inline position obj
2023-12-31 23:36:25 UTC	1702	IN	Data Raw: 69 64 20 75 2e 70 6f 73 74 4d 65 73 73 61 67 65 73 2e 73 65 6e 64 28 74 2c 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 2c 63 61 75 73 65 64 42 79 4d 65 74 68 6f 64 3a 22 63 6f 6c 6c 61 70 73 65 22 2c 6d 65 73 73 61 67 65 3a 22 63 61 6e 63 65 6c 65 64 22 7d 29 3b 64 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 43 6f 6c 6c 61 70 73 69 6e 67 28 65 29 2c 73 2e 63 6f 6c 6c 61 70 73 65 28 74 2c 68 29 2c 64 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 64 28 65 29 2c 75 2e 70 6f 73 74 4d 65 73 73 61 67 65 73 2e 73 65 6e 64 28 74 2c 7b 74 79 70 65 3a 22 63 6f 6c 6c 61 70 73 65 64 22 7d 29 2c 72 2e 6e 6f 74 69 66 79 50 6f 73 4d 73 67 28 65 2c 22 63 6f 6c 6c 61 70 73 65 22 29 7d 69 66 28 22 6e 75 6b 65 22 3d 3d 3d 6f 2e 74 Data Ascii: id u.postMessages.send(t,{type:"error",causedByMethod:"collapse",message:"canceled"});d.status.setPositionCollapsing(e),s.collapse(t,h),d.status.setPositionCollapsed(e),u.postMessages.send(t,{type:"collapsed"}),r.notifyPosMsg(e,"collapse")}if("nuke"===o.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49791	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:24 UTC	582	OUT	GET /partner-code-bundles/937691/d053ed1897419218e52b.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:25 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:25 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 60346 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "890bcae54284ea3543503d644d6f28bc" Expires: Wed, 31 Dec 2053 06:12:25 GMT Last-Modified: Wed, 27 Dec 2023 15:52:49 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2023-12-31 23:36:25 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 39 33 37 36 39 31 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 39 34 32 31 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 Data Ascii: /! v:937691 b:default c:9421 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prot
2023-12-31 23:36:25 UTC	16384	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 52 65 61 73 6f 6e 7d 7d 2c 7b 6b 65 79 3a 22 69 73 44 65 73 74 72 6f 79 65 64 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 73 44 65 73 74 72 6f 79 65 64 7d 7d 5d 29 26 26 53 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 7d 28 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 2c 22 65 72 72 6f 72 48 61 6e 64 6c 65 72 73 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 Data Ascii: :function(){return this._destroyReason}},{key:"isDestroyed",get:function(){return this._isDestroyed}}])&&S(t.prototype,r),Object.defineProperty(t,"prototype",{writable:!1}),e}();Object.defineProperty(A,"errorHandlers",{enumerable:!0,configurable:!0,writab
2023-12-31 23:36:25 UTC	16384	IN	Data Raw: 65 64 3d 30 2c 5f 2e 61 64 73 64 6b 67 72 66 6f 72 63 65 64 3d 30 2c 5f 2e 76 61 73 6e 65 74 77 6f 72 6b 6c 6f 67 73 3d 30 2c 5f 2e 76 61 73 63 6f 6e 73 6f 6c 65 6c 6f 67 73 3d 30 2c 5f 2e 76 61 73 64 65 62 75 67 3d 30 2c 5f 2e 76 61 73 66 75 6c 6c 64 65 62 75 67 3d 30 2c 5f 2e 61 64 73 64 6b 64 65 62 75 67 3d 30 2c 5f 29 2c 56 3d 28 30 2c 75 2e 5a 29 28 4e 29 2c 4c 3d 28 30 2c 75 2e 5a 29 28 7b 55 6e 73 61 66 65 3a 30 2c 53 61 66 65 3a 30 2c 46 6f 72 63 65 53 61 66 65 3a 30 2c 4f 6e 6c 79 59 61 6e 64 65 78 43 72 65 61 74 69 76 65 73 3a 30 7d 29 2c 6b 3d 72 28 36 30 31 37 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 46 Data Ascii: ed=0,_.adsdkgrforced=0,_.vasnetworklogs=0,_.vasconsolelogs=0,_.vasdebug=0,_.vasfulldebug=0,_.adsdkdebug=0,_),V=(0,u.Z)(N),L=(0,u.Z)({Unsafe:0,Safe:0,ForceSafe:0,OnlyYandexCreatives:0}),k=r(6017);function M(e){return Boolean(e)}function C(e){return e}var F
2023-12-31 23:36:25 UTC	11961	IN	Data Raw: 26 26 74 28 65 29 7d 7d 72 2e 64 28 74 2c 7b 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 7d 2c 38 34 37 34 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 6e 3d 72 28 32 33 31 30 34 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 30 29 2c 6e 2e 24 26 26 74 29 72 65 74 75 72 6e 5b 5d 3b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6f 3d 65 3b 3b 29 74 72 79 7b 69 66 28 21 28 6f 3d 6f 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 29 29 72 65 74 75 72 6e Data Ascii: &&t(e)}}r.d(t,{Y:function(){return n}})},84741:function(e,t,r){"use strict";r.d(t,{A:function(){return o}});var n=r(23104);function o(e,t){if(void 0===t&&(t=!0),n.$&&t)return[];for(var r=[],o=e;;)try{if(!(o=o.ownerDocument.defaultView.frameElement))return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49796	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:25 UTC	696	OUT	GET /metrika/metrika_match.html HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49798	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:25 UTC	582	OUT	GET /partner-code-bundles/937691/4c9a181cc3ad10f671b2.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://faq-kak.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:26 UTC	768	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:26 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 605447 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "89d4087931da164062a0133d201519a9" Expires: Wed, 31 Dec 2053 06:12:26 GMT Last-Modified: Wed, 27 Dec 2023 15:52:49 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2023-12-31 23:36:26 UTC	15616	IN	Data Raw: 2f 2a 21 20 76 3a 39 33 37 36 39 31 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 61 64 76 6d 61 6e 61 67 65 72 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f Data Ascii: /! v:937691 b:default c:advmanager /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Functio
2023-12-31 23:36:26 UTC	16384	IN	Data Raw: 31 32 29 3b 65 2e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 65 2e 69 73 41 41 2c 61 3d 65 2e 76 69 64 65 6f 50 61 72 61 6d 73 2c 73 3d 65 2e 73 68 6f 75 6c 64 4e 6f 74 56 61 6c 69 64 61 74 65 4d 61 78 45 61 72 73 50 6f 72 74 69 6f 6e 2c 6c 3d 42 6f 6f 6c 65 61 6e 28 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 76 61 73 74 42 61 73 65 36 34 29 7c 7c 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 76 61 73 74 29 29 2c 63 3d 28 30 2c 6f 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 44 61 74 61 29 28 22 6e 61 6d 65 22 2c 22 73 6c 6f 74 22 2c 74 29 2c 75 3d 28 30 2c 69 2e 76 61 6c 69 64 61 74 65 56 69 64 65 6f 53 6c 6f 74 29 28 7b 69 73 41 41 3a 6e 2c 73 6c 6f 74 3a 63 7c 7c 76 6f 69 64 20 30 2c 76 69 64 65 6f 43 6f 6e 74 65 6e Data Ascii: 12);e.c=function(t,e){var n=e.isAA,a=e.videoParams,s=e.shouldNotValidateMaxEarsPortion,l=Boolean((null==a?void 0:a.vastBase64)\|\|(null==a?void 0:a.vast)),c=(0,o.getElementByData)("name","slot",t),u=(0,i.validateVideoSlot)({isAA:n,slot:c\|\|void 0,videoConten
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 65 73 73 55 6e 69 74 4c 61 62 65 6c 54 68 65 6d 65 2c 6d 3d 74 2e 73 68 6f 75 6c 64 52 65 6e 64 65 72 42 75 73 69 6e 65 73 73 55 6e 69 74 43 72 6f 73 73 2c 45 3d 74 2e 6c 61 6e 67 75 61 67 65 2c 79 3d 74 2e 64 69 73 61 62 6c 65 42 75 73 69 6e 65 73 73 55 6e 69 74 54 6f 6f 6c 74 69 70 2c 41 3d 74 2e 62 75 73 69 6e 65 73 73 55 6e 69 74 4c 61 62 65 6c 43 6c 61 73 73 4e 61 6d 65 2c 49 3d 74 2e 69 73 52 54 4c 2c 62 3d 4f 28 6c 2c 73 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 68 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 72 5b 22 64 65 66 61 75 6c 74 22 5d 29 28 54 2e 61 64 4c 61 62 65 6c 2c 75 2c 76 26 26 54 2e 61 64 4c 61 62 65 6c 57 69 74 68 42 75 73 69 6e 65 73 73 55 6e 69 74 2c 76 26 26 69 26 26 21 6e 26 26 54 2e 61 64 4c 61 62 65 6c 57 Data Ascii: essUnitLabelTheme,m=t.shouldRenderBusinessUnitCross,E=t.language,y=t.disableBusinessUnitTooltip,A=t.businessUnitLabelClassName,I=t.isRTL,b=O(l,s);return(0,a.h)("div",{className:(0,r["default"])(T.adLabel,u,v&&T.adLabelWithBusinessUnit,v&&i&&!n&&T.adLabelW
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6c 6f 73 65 64 2d 63 6c 61 73 73 22 29 3b 65 26 26 6e 26 26 28 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 65 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 6e 29 7d 29 2c 31 65 33 29 29 7d 65 2e 5a 37 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 28 30 2c 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 44 61 74 61 29 28 22 6e 61 6d 65 22 2c 22 73 75 72 76 65 79 43 6c 6f 73 65 22 2c 74 29 7c 7c 5b 5d 29 5b 30 5d 2c 6e 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 75 72 76 65 79 49 64 22 29 7c 7c 22 22 3b 69 66 28 65 29 76 61 72 20 63 3d 28 30 2c 69 2e 6f 6e 29 28 65 2c 22 63 6c 69 63 6b 22 Data Ascii: tAttribute("data-closed-class");e&&n&&(t.classList.add(e),setTimeout((function(){t.classList.add(n)}),1e3))}e.Z7=function(t){var e=((0,a.getElementsByData)("name","surveyClose",t)\|\|[])[0],n=t.getAttribute("data-surveyId")\|\|"";if(e)var c=(0,i.on)(e,"click"
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 61 6d 65 22 2c 22 73 74 6f 72 79 22 29 2c 74 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 74 68 69 73 2e 73 74 6f 72 69 65 73 57 69 64 74 68 2b 22 70 78 22 2c 74 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 52 69 67 68 74 3d 22 38 70 78 22 2c 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 53 74 6f 72 69 65 73 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 70 72 6f 67 72 65 73 73 42 61 72 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 74 3d 28 30 2c 75 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 28 74 68 69 73 2e 70 72 6f 67 72 Data Ascii: r t=document.createElement("div");return t.setAttribute("data-name","story"),t.style.width=this.storiesWidth+"px",t.style.marginRight="8px",t},e.prototype.initStoriesWidth=function(){if(this.progressBarElement){var t=(0,u.getBoundingClientRect)(this.progr
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 53 74 72 69 6e 67 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 6f 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 43 65 6e 74 65 72 43 61 72 6f 75 73 65 6c 43 6f 6e 74 72 6f 6c 6c 65 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 6e 28 33 30 39 31 33 29 2c 61 3d 6e Data Ascii: String(e)+" is not a constructor or null");function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)});Object.defineProperty(e,"__esModule",{value:!0}),e.CenterCarouselController=void 0;var r=n(30913),a=n
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 64 61 74 65 4b 65 62 61 62 41 6e 64 4c 61 62 65 6c 54 68 65 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 69 29 7b 76 61 72 20 72 3d 6f 28 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2d 74 68 65 6d 65 22 29 2c 74 29 2c 61 3d 6f 28 22 64 61 72 6b 2d 74 68 65 6d 65 22 2c 74 29 2c 73 3d 6f 28 22 6c 69 67 68 74 2d 74 68 65 6d 65 22 2c 74 29 3b 69 66 28 6e 26 26 28 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 61 2c 73 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 72 29 29 2c 69 29 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 69 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 69 2e 63 68 69 6c 64 72 65 6e 5b 6c 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 61 2c 73 29 2c 69 2e 63 68 69 6c 64 72 65 6e 5b 6c 5d 2e 63 Data Ascii: dateKebabAndLabelTheme=function(t,e,n,i){var r=o("".concat(e,"-theme"),t),a=o("dark-theme",t),s=o("light-theme",t);if(n&&(n.classList.remove(a,s),n.classList.add(r)),i)for(var l=0;l<i.children.length;l++)i.children[l].classList.remove(a,s),i.children[l].c
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 50 2e 52 65 6e 64 65 72 4d 61 72 6b 73 2e 53 74 61 72 74 45 66 66 65 63 74 52 65 6e 64 65 72 69 6e 67 29 2c 74 68 69 73 2e 72 65 73 69 7a 65 42 61 6e 6e 65 72 28 29 2c 74 68 69 73 2e 69 73 49 6e 74 65 72 73 74 69 74 69 61 6c 26 26 21 74 68 69 73 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 26 26 28 74 68 69 73 2e 72 65 6d 6f 76 65 52 65 73 69 7a 65 4c 69 73 74 65 6e 65 72 3d 28 30 2c 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 28 77 69 6e 64 6f 77 2c 22 72 65 73 69 7a 65 22 2c 28 30 2c 65 74 2e 64 65 62 6f 75 6e 63 65 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 69 7a 65 42 61 6e 6e 65 72 28 7b 64 69 73 61 62 6c 65 4c 6f 67 67 69 6e 67 3a 21 30 7d 29 7d 29 2c 31 35 30 29 29 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 6f Data Ascii: P.RenderMarks.StartEffectRendering),this.resizeBanner(),this.isInterstitial&&!this.isFullscreen&&(this.removeResizeListener=(0,h.addEventListener)(window,"resize",(0,et.debounce)((function(){return t.resizeBanner({disableLogging:!0})}),150))),this.props.o
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 64 64 65 6e 22 2c 77 69 64 74 68 3a 6f 2c 68 65 69 67 68 74 3a 69 7d 2c 21 30 29 7d 2c 28 30 2c 61 2e 68 29 28 22 64 69 76 22 2c 7b 72 65 66 3a 74 68 69 73 2e 62 6f 64 79 2c 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 75 2e 65 6e 63 6f 64 65 43 6c 61 73 73 4e 61 6d 65 73 29 28 62 28 22 5f 5f 62 6f 64 79 22 29 29 2c 73 74 79 6c 65 3a 28 30 2c 70 2e 73 74 79 6c 65 4f 62 6a 54 6f 43 73 73 29 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 22 2c 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 2c 77 69 64 74 68 3a 6f 2c 68 65 69 67 68 74 3a 69 7d 2c 21 30 29 7d 29 2c 28 30 2c 61 2e 68 29 28 63 2e 53 74 79 6c 65 2c 7b 73 74 79 6c 65 73 3a 74 68 69 73 2e 67 65 74 53 74 79 6c 65 73 4c 69 73 74 28 29 2c 76 61 72 69 61 62 6c 65 73 3a 74 68 69 73 2e 67 65 74 43 73 73 56 Data Ascii: dden",width:o,height:i},!0)},(0,a.h)("div",{ref:this.body,className:(0,u.encodeClassNames)(b("__body")),style:(0,p.styleObjToCss)({position:"relative",top:0,left:0,width:o,height:i},!0)}),(0,a.h)(c.Style,{styles:this.getStylesList(),variables:this.getCssV
2023-12-31 23:36:27 UTC	16384	IN	Data Raw: 3d 66 7d 2c 37 32 34 35 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 2c 69 3d 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 7d 2c 6f 28 74 2c 65 29 7d 2c 66 75 6e 63 Data Ascii: =f},72457:function(t,e,n){"use strict";var o,i=(o=function(t,e){return o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},o(t,e)},func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49800	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:26 UTC	2099	OUT	GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003623%3Aet%3A1704065783%3Ac%3A1%3Arn%3A39487341%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Afp%3A7384%3Arqnl%3A1%3Ast%3A1704065785%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(1)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:27 UTC	3474	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Date: Sun, 31 Dec 2023 23:36:27 GMT Expires: Sun, 31-Dec-2023 23:36:27 GMT Last-Modified: Sun, 31-Dec-2023 23:36:27 GMT Location: /watch/95527089/1?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003623%3Aet%3A1704065783%3Ac%3A1%3Arn%3A39487341%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Afp%3A7384%3Arqnl%3A1%3Ast%3A1704065785%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29ecs%280%29ti%281%29&redirnss=1 Pragma: no-cache Set-Cookie: yabs-sid=773563701704065787; Path=/; SameSite=None; Secure Set-Cookie: i=cRikEaxuewgj6d0pnW/OTt/Sm5V/aY7hYsU97yqmHS9f8LAuualjfyi0AIv+KrL+n0Hi6KY2m5gp7ZuhXBlX52X7HNI=; Expires=Wed, 28-Dec-2033 23:36:23 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=9623888321704065787; Expires=Wed, 28-Dec-2033 23:36:23 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yuidss=9623888321704065787; Expires=Mon, 30-Dec-2024 23:36:27 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; Expires=Mon, 30-Dec-2024 23:36:27 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:36:27 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2023-12-31 23:36:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49801	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:26 UTC	590	OUT	GET /sync_cookie_image_check HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:27 UTC	528	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Sun, 31 Dec 2023 23:36:27 GMT Location: https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10234.s_UndBrRNMbNh5NrRcZ18nWf5mqJQwnxjsR9f_0qriXcYT6deia5YMKkVtsiEbeR.D3vICVDUgqF8gTKSQ2FMw1Namwc%2C Set-Cookie: sync_cookie_csrf=1120317805fake; Expires=Sun, 31-Dec-2023 23:46:27 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2023-12-31 23:36:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:27 UTC	585	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:27 UTC	1173	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:27 GMT ETag: "65898a2e-2b" Expires: Mon, 01 Jan 2024 00:36:27 GMT Last-Modified: Mon, 25 Dec 2023 13:57:02 GMT Set-Cookie: _yasc=I0tR9JaKCf1gXlOBgqdrPmCMUf/PykIgSuJapuRm4TkIjPgURmDVw7PAjTdlUgLjwQ==; domain=.yandex.com; path=/; expires=Wed, 28 Dec 2033 23:36:27 GMT; secure Set-Cookie: i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; Expires=Tue, 30-Dec-2025 23:36:27 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=6897081051704065787; Expires=Tue, 30-Dec-2025 23:36:27 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2023-12-31 23:36:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49804	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:27 UTC	10348	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&imp-id=1&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=79867447&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A347%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B7174798202954%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:28 UTC	1291	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065787745182-14158527994491720672-balancer-l7leveler-kubr-yp-vla-137-BAL-4825 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:36:27 GMT expires: Sun, 31 Dec 2023 23:36:27 GMT last-modified: Sun, 31 Dec 2023 23:36:27 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:36:27 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:36:28 UTC	3824	IN	Data Raw: 45 45 39 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 37 39 37 33 30 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 37 31 35 30 38 36 32 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 Data Ascii: EE9{"impressionData":{"currency":"RUB","revenueUSD":"0.000079730","precision":"estimated","revenue":"0.007150862"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"78362
2023-12-31 23:36:28 UTC	3593	IN	Data Raw: 45 30 32 0d 0a 74 22 3a 22 23 46 46 46 46 46 46 22 2c 22 74 6f 70 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 63 6c 61 73 73 69 66 69 65 72 73 22 3a 7b 22 61 65 73 74 68 65 74 69 63 22 3a 31 34 34 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 31 30 33 31 31 32 34 34 2f 70 69 63 62 34 66 63 39 37 64 35 66 39 32 34 61 31 32 62 32 38 36 66 63 30 34 34 32 64 37 32 64 30 32 31 2f 68 75 67 65 22 2c 22 35 30 30 22 2c 22 34 37 31 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 31 35 33 2c 22 68 22 3a 31 35 36 2c 22 78 22 3a 30 2c 22 77 22 3a 34 39 37 7d 2c 7b 22 79 22 3a 31 33 30 2c 22 68 22 3a 32 38 31 2c 22 78 Data Ascii: E02t":"#FFFFFF","top":"#FFFFFF"},"classifiers":{"aesthetic":144}}],["https://avatars.mds.yandex.net/get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/huge","500","471",{"smart-centers":[{"y":153,"h":156,"x":0,"w":497},{"y":130,"h":281,"x
2023-12-31 23:36:28 UTC	4590	IN	Data Raw: 31 31 45 36 0d 0a 58 65 4c 41 33 66 52 33 73 4d 48 33 35 33 41 49 75 69 41 65 39 52 45 5a 67 62 4e 5a 6d 41 71 4b 6f 2d 67 30 68 48 4a 42 6e 75 35 51 41 54 55 4b 6d 4c 65 78 49 59 46 53 75 66 42 78 2d 61 34 30 6a 59 63 4e 5a 6e 6f 6c 59 52 6f 61 64 30 48 34 61 77 41 6f 55 64 45 6d 31 77 45 46 75 4a 7a 31 77 5f 74 6d 39 4b 4d 41 4a 73 58 44 67 31 41 35 56 32 53 61 35 76 64 53 42 32 55 42 77 6d 68 42 30 67 49 48 6f 5f 53 5a 48 53 34 39 72 79 61 58 76 44 34 63 57 76 6c 7a 58 69 4b 46 6b 31 51 42 37 30 2d 74 70 33 50 55 31 74 4f 79 39 73 6d 57 4a 69 30 73 50 32 66 37 56 38 69 70 65 54 4d 6d 7a 75 79 59 5f 45 58 72 52 32 54 55 6c 34 38 4f 39 6a 58 42 73 41 4d 58 49 49 33 35 76 74 73 68 63 33 47 66 64 59 78 30 69 50 4b 48 4e 52 52 61 61 32 4e 39 70 48 44 4f 49 Data Ascii: 11E6XeLA3fR3sMH353AIuiAe9REZgbNZmAqKo-g0hHJBnu5QATUKmLexIYFSufBx-a40jYcNZnolYRoad0H4awAoUdEm1wEFuJz1w_tm9KMAJsXDg1A5V2Sa5vdSB2UBwmhB0gIHo_SZHS49ryaXvD4cWvlzXiKFk1QB70-tp3PU1tOy9smWJi0sP2f7V8ipeTMmzuyY_EXrR2TUl48O9jXBsAMXII35vtshc3GfdYx0iPKHNRRaa2N9pHDOI
2023-12-31 23:36:28 UTC	3585	IN	Data Raw: 44 46 41 0d 0a 69 67 68 74 22 3a 22 23 46 46 46 46 46 46 22 2c 22 74 6f 70 22 3a 22 23 46 46 46 46 46 46 22 7d 2c 22 63 6c 61 73 73 69 66 69 65 72 73 22 3a 7b 22 6c 6f 6f 6b 22 3a 39 2c 22 61 65 73 74 68 65 74 69 63 22 3a 31 34 34 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 39 33 35 37 32 34 32 2f 70 69 63 63 63 38 62 31 35 64 31 62 66 63 66 35 61 32 36 34 32 36 39 61 61 38 61 33 33 66 38 31 33 31 37 2f 68 75 67 65 22 2c 22 35 30 30 22 2c 22 34 37 31 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 32 34 31 2c 22 68 22 3a 31 35 37 2c 22 78 22 3a 30 2c 22 77 22 3a 34 39 39 7d 2c 7b 22 79 22 3a 31 33 35 Data Ascii: DFAight":"#FFFFFF","top":"#FFFFFF"},"classifiers":{"look":9,"aesthetic":144}}],["https://avatars.mds.yandex.net/get-yabs_performance/9357242/piccc8b15d1bfcf5a264269aa8a33f81317/huge","500","471",{"smart-centers":[{"y":241,"h":157,"x":0,"w":499},{"y":135
2023-12-31 23:36:28 UTC	4598	IN	Data Raw: 31 31 45 45 0d 0a 31 62 53 6f 50 47 4a 61 6b 58 35 51 4e 49 59 5a 58 43 30 75 43 41 33 33 67 45 31 70 6e 39 4b 57 63 59 66 4c 36 31 65 68 46 72 4b 31 52 39 30 41 4d 79 6a 41 57 30 51 6b 64 69 63 37 68 72 41 34 30 78 7a 51 38 67 47 33 6c 72 75 62 36 30 54 6b 65 72 4c 4f 33 4d 5a 6c 38 75 66 78 5a 71 64 61 75 57 57 36 74 67 6e 49 46 64 51 6f 41 46 49 57 45 72 72 50 54 6d 4a 64 53 36 7a 64 30 69 42 4c 39 77 47 63 72 30 62 49 68 57 45 49 36 7a 70 6b 31 57 46 4c 7a 4f 4c 72 57 4b 39 38 7a 55 6b 31 69 6c 32 34 77 2d 49 30 75 64 59 4a 47 54 74 6b 6f 45 46 4e 48 77 4e 32 52 45 76 6e 69 63 36 77 79 33 36 78 75 4a 44 64 30 37 38 31 69 6f 6a 4b 45 55 6e 56 64 47 51 6a 59 52 50 74 34 2d 6a 31 67 73 4b 6f 79 55 30 4d 6d 70 78 34 4e 43 69 66 31 61 79 41 42 4a 74 58 4b Data Ascii: 11EE1bSoPGJakX5QNIYZXC0uCA33gE1pn9KWcYfL61ehFrK1R90AMyjAW0Qkdic7hrA40xzQ8gG3lrub60TkerLO3MZl8ufxZqdauWW6tgnIFdQoAFIWErrPTmJdS6zd0iBL9wGcr0bIhWEI6zpk1WFLzOLrWK98zUk1il24w-I0udYJGTtkoEFNHwN2REvnic6wy36xuJDd0781iojKEUnVdGQjYRPt4-j1gsKoyU0Mmpx4NCif1ayABJtXK
2023-12-31 23:36:28 UTC	3577	IN	Data Raw: 44 46 32 0d 0a 22 23 46 46 46 46 46 46 22 7d 2c 22 63 6c 61 73 73 69 66 69 65 72 73 22 3a 7b 22 6c 6f 6f 6b 22 3a 32 2c 22 61 65 73 74 68 65 74 69 63 22 3a 31 34 37 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 35 31 31 37 39 37 39 2f 70 69 63 64 37 38 38 32 36 62 66 66 31 31 65 61 36 36 61 63 62 31 36 31 39 61 66 32 36 62 32 65 31 34 62 2f 68 75 67 65 22 2c 22 35 30 30 22 2c 22 34 38 34 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 31 34 37 2c 22 68 22 3a 31 35 37 2c 22 78 22 3a 30 2c 22 77 22 3a 34 39 39 7d 2c 7b 22 79 22 3a 31 34 30 2c 22 68 22 3a 32 38 31 2c 22 78 22 3a 31 2c 22 77 22 3a 34 39 39 Data Ascii: DF2"#FFFFFF"},"classifiers":{"look":2,"aesthetic":147}}],["https://avatars.mds.yandex.net/get-yabs_performance/5117979/picd78826bff11ea66acb1619af26b2e14b/huge","500","484",{"smart-centers":[{"y":147,"h":157,"x":0,"w":499},{"y":140,"h":281,"x":1,"w":499
2023-12-31 23:36:28 UTC	4606	IN	Data Raw: 31 31 46 36 0d 0a 67 30 45 74 4b 59 71 53 31 73 67 64 4e 4c 30 35 51 45 79 68 5a 64 45 42 49 55 70 67 31 30 42 51 66 35 75 2d 53 68 6d 61 5a 32 37 49 37 38 59 33 42 76 64 48 64 4f 30 5f 37 71 59 41 62 39 7a 47 36 4c 41 61 32 64 58 46 49 77 6d 6d 45 72 6c 45 35 54 4f 4c 35 47 56 42 65 58 52 6c 6e 57 6b 33 61 59 2d 48 6d 61 61 5a 4a 75 53 73 2d 30 77 68 6c 56 76 36 53 70 70 54 43 44 62 75 37 44 64 6d 64 52 45 30 45 47 33 50 61 51 65 53 79 59 5f 45 58 72 52 30 74 70 2d 39 79 51 33 4c 69 66 72 75 79 30 6a 58 63 73 38 6b 4f 50 49 37 39 75 34 4d 64 6c 49 69 4f 6a 32 64 55 68 65 30 6e 4c 50 37 54 6a 59 4a 47 76 47 62 44 4b 7a 57 41 47 59 36 43 38 54 45 77 33 6a 77 58 5a 54 67 41 34 4c 45 30 57 59 35 5a 36 30 38 6c 6f 76 51 49 4c 69 47 6d 74 48 48 34 52 58 57 32 Data Ascii: 11F6g0EtKYqS1sgdNL05QEyhZdEBIUpg10BQf5u-ShmaZ27I78Y3BvdHdO0_7qYAb9zG6LAa2dXFIwmmErlE5TOL5GVBeXRlnWk3aY-HmaaZJuSs-0whlVv6SppTCDbu7DdmdRE0EG3PaQeSyY_EXrR0tp-9yQ3Lifruy0jXcs8kOPI79u4MdlIiOj2dUhe0nLP7TjYJGvGbDKzWAGY6C8TEw3jwXZTgA4LE0WY5Z608lovQILiGmtHH4RXW2
2023-12-31 23:36:28 UTC	3569	IN	Data Raw: 44 45 41 0d 0a 2e 6e 65 74 2f 67 65 74 2d 79 61 62 73 5f 70 65 72 66 6f 72 6d 61 6e 63 65 2f 39 37 34 35 32 34 34 2f 70 69 63 37 33 61 62 62 31 34 63 36 31 33 34 30 66 65 66 33 64 64 38 35 31 65 66 63 30 65 30 32 66 32 34 2f 68 75 67 65 22 2c 22 34 34 37 22 2c 22 35 30 30 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 31 33 37 2c 22 68 22 3a 31 34 30 2c 22 78 22 3a 30 2c 22 77 22 3a 34 34 36 7d 2c 7b 22 79 22 3a 31 31 38 2c 22 68 22 3a 32 35 31 2c 22 78 22 3a 30 2c 22 77 22 3a 34 34 36 7d 2c 7b 22 79 22 3a 35 32 2c 22 68 22 3a 34 34 36 2c 22 78 22 3a 30 2c 22 77 22 3a 34 34 36 7d 2c 7b 22 79 22 3a 30 2c 22 68 22 3a 34 39 39 2c 22 78 22 3a 32 38 2c 22 77 22 3a 33 37 34 7d 2c 7b 22 79 22 3a 31 31 33 2c 22 68 22 3a 33 33 34 2c 22 Data Ascii: DEA.net/get-yabs_performance/9745244/pic73abb14c61340fef3dd851efc0e02f24/huge","447","500",{"smart-centers":[{"y":137,"h":140,"x":0,"w":446},{"y":118,"h":251,"x":0,"w":446},{"y":52,"h":446,"x":0,"w":446},{"y":0,"h":499,"x":28,"w":374},{"y":113,"h":334,"
2023-12-31 23:36:28 UTC	4614	IN	Data Raw: 31 31 46 45 0d 0a 70 47 64 67 54 6d 53 35 77 6c 68 32 6b 69 32 58 38 37 68 72 6d 44 72 75 47 64 37 6f 48 37 34 75 49 51 4a 67 79 73 51 7a 53 79 56 36 71 65 45 66 79 6c 63 36 6f 79 4a 67 6d 75 4a 6a 58 30 74 53 30 69 59 35 4a 45 2d 48 50 64 30 2d 6a 58 68 72 76 35 6b 54 33 67 73 34 78 7a 55 38 48 6d 33 52 33 4e 69 47 69 32 71 61 36 42 70 68 6a 4e 53 36 57 4a 56 35 73 31 4f 6f 66 59 6b 6f 73 39 4f 34 6b 4a 73 59 51 6d 62 4f 47 32 63 34 43 63 54 50 72 79 30 76 6a 72 35 51 43 63 30 38 4b 33 31 64 33 34 37 58 50 6a 66 49 71 38 65 52 66 66 59 31 6f 6d 6e 32 30 2d 4d 50 42 4b 79 7a 70 63 73 50 33 6c 6a 58 4a 64 56 4e 7a 43 35 44 44 49 76 47 46 37 6b 32 68 79 37 79 6e 44 45 64 77 4e 57 6e 44 6b 5a 77 4e 76 69 70 75 7a 6f 47 55 2d 7a 56 73 76 33 4e 76 73 50 77 79 Data Ascii: 11FEpGdgTmS5wlh2ki2X87hrmDruGd7oH74uIQJgysQzSyV6qeEfylc6oyJgmuJjX0tS0iY5JE-HPd0-jXhrv5kT3gs4xzU8Hm3R3NiGi2qa6BphjNS6WJV5s1OofYkos9O4kJsYQmbOG2c4CcTPry0vjr5QCc08K31d347XPjfIq8eRffY1omn20-MPBKyzpcsP3ljXJdVNzC5DDIvGF7k2hy7ynDEdwNWnDkZwNvipuzoGU-zVsv3NvsPwy
2023-12-31 23:36:28 UTC	3561	IN	Data Raw: 44 45 32 0d 0a 30 30 31 38 38 61 32 66 34 38 63 62 38 37 38 38 30 35 30 31 66 35 62 32 30 38 35 61 32 38 38 2f 68 75 67 65 22 2c 22 35 30 30 22 2c 22 34 37 32 22 2c 7b 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 79 22 3a 31 35 34 2c 22 68 22 3a 31 35 36 2c 22 78 22 3a 30 2c 22 77 22 3a 34 39 39 7d 2c 7b 22 79 22 3a 31 33 30 2c 22 68 22 3a 32 38 30 2c 22 78 22 3a 30 2c 22 77 22 3a 34 39 39 7d 2c 7b 22 79 22 3a 30 2c 22 68 22 3a 34 37 31 2c 22 78 22 3a 33 2c 22 77 22 3a 34 37 31 7d 2c 7b 22 79 22 3a 30 2c 22 68 22 3a 34 37 31 2c 22 78 22 3a 31 31 35 2c 22 77 22 3a 33 35 33 7d 2c 7b 22 79 22 3a 38 34 2c 22 68 22 3a 33 37 34 2c 22 78 22 3a 30 2c 22 77 22 3a 34 39 39 7d 5d 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 79 22 3a 34 32 2c 22 Data Ascii: DE200188a2f48cb87880501f5b2085a288/huge","500","472",{"smart-centers":[{"y":154,"h":156,"x":0,"w":499},{"y":130,"h":280,"x":0,"w":499},{"y":0,"h":471,"x":3,"w":471},{"y":0,"h":471,"x":115,"w":353},{"y":84,"h":374,"x":0,"w":499}],"smart-center":{"y":42,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49783	87.250.251.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:27 UTC	889	OUT	GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10234.s_UndBrRNMbNh5NrRcZ18nWf5mqJQwnxjsR9f_0qriXcYT6deia5YMKkVtsiEbeR.D3vICVDUgqF8gTKSQ2FMw1Namwc%2C HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:27 UTC	672	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Sun, 31 Dec 2023 23:36:27 GMT Location: https://mc.yandex.com/sync_cookie_image_decide?token=10234.aUB3SqFXQihpV7u28KLmxTeuijO6AILiIGSmXB45GAmCA-XNN_aZ3BsS_WV9BFXEXcMi7wmyeblU8qtwS-FZj0MkgvXA4Qk_5OI8GDbVDq4cjs3HtAI8NG8YU0jZpZKsmuUtntd01uER4IpUIIbN4fUDZtK8LWl3RrBdwj7a9iOC8vJbKIpipFfqyZeRXA9Wr6kZKhssIdUzDHA-lArJPQTqlEdEzRmVWQ_JY3zD2Bg%2C.uciNXaA1uFCPKE6sbyPqFUdf9oo%2C Set-Cookie: sync_cookie_csrf=886343449fake; Expires=Sun, 31-Dec-2023 23:46:27 GMT; Domain=.mc.yandex.ru; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2023-12-31 23:36:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49807	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:27 UTC	2686	OUT	GET /watch/95527089/1?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003623%3Aet%3A1704065783%3Ac%3A1%3Arn%3A39487341%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Afp%3A7384%3Arqnl%3A1%3Ast%3A1704065785%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29ecs%280%29ti%281%29&redirnss=1 HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; i=cRikEaxuewgj6d0pnW/OTt/Sm5V/aY7hYsU97yqmHS9f8LAuualjfyi0AIv+KrL+n0Hi6KY2m5gp7ZuhXBlX52X7HNI=; yandexuid=9623888321704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:36:28 UTC	809	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 435 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:28 GMT Expires: Sun, 31-Dec-2023 23:36:28 GMT Last-Modified: Sun, 31-Dec-2023 23:36:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:28 UTC	435	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 59 76 47 75 31 4f 6c 72 53 49 52 5a 6b 36 7a 47 69 47 36 70 63 75 67 6c 76 32 6b 46 36 73 6f 69 5a 5a 63 6f 47 75 6d 62 56 6e 4c 6e 66 42 45 71 4f 56 50 6b 48 35 4b 63 32 46 67 33 56 45 6d 4b 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"YvGu1OlrSIRZk6zGiG6pcuglv2kF6soiZZcoGumbVnLnfBEqOVPkH5Kc2Fg3VEmK"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49809	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:28 UTC	2417	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003627%3Aet%3A1704065788%3Ac%3A1%3Arn%3A593407504%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065788%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(75800)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787
2023-12-31 23:36:29 UTC	1626	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:28 GMT Expires: Sun, 31-Dec-2023 23:36:28 GMT Last-Modified: Sun, 31-Dec-2023 23:36:28 GMT Pragma: no-cache Set-Cookie: yandexuid=6897081051704065787; Expires=Mon, 30-Dec-2024 23:36:28 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=6897081051704065787; Expires=Mon, 30-Dec-2024 23:36:28 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1735601788.yrts.1704065788#1735601787.yrtsi.1704065787; Expires=Mon, 30-Dec-2024 23:36:28 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:36:28 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:29 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 38 66 34 2f 33 50 44 68 46 57 32 4f 74 54 39 70 75 55 36 2f 70 72 37 33 62 61 68 5a 57 54 6e 75 6f 47 72 6d 57 74 37 6f 4c 53 71 47 36 35 6d 67 7a 4d 59 45 66 70 35 34 73 41 47 39 2f 6e 54 31 22 2c 20 22 62 22 3a 22 61 77 30 37 68 47 62 44 6e 68 2b 76 53 77 35 33 46 78 54 59 38 43 37 7a 43 48 79 44 7a 65 55 62 7a 73 67 65 57 49 5a 35 49 78 38 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 37 38 38 5f 64 38 34 65 66 63 33 32 34 33 64 35 39 61 30 39 61 36 36 33 37 31 36 63 61 37 37 64 64 32 30 34 61 32 32 37 65 36 66 31 61 66 61 33 39 39 37 30 39 37 36 66 64 64 36 38 35 39 63 37 39 63 34 66 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"8f4/3PDhFW2OtT9puU6/pr73bahZWTnuoGrmWt7oLSqG65mgzMYEfp54sAG9/nT1", "b":"aw07hGbDnh+vSw53FxTY8C7zCHyDzeUbzsgeWIZ5Ix8="},"eu":2,"hittoken":"1704065788_d84efc3243d59a09a663716ca77dd204a227e6f1afa39970976fdd6859c79c4f"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49810	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	930	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787
2023-12-31 23:36:30 UTC	832	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:30 GMT ETag: "65898a2e-2b" Expires: Mon, 01 Jan 2024 00:36:30 GMT Last-Modified: Mon, 25 Dec 2023 13:57:02 GMT Set-Cookie: _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; domain=.yandex.com; path=/; expires=Wed, 28 Dec 2033 23:36:30 GMT; secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2023-12-31 23:36:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49812	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	1448	OUT	GET /sync_cookie_image_decide?token=10234.aUB3SqFXQihpV7u28KLmxTeuijO6AILiIGSmXB45GAmCA-XNN_aZ3BsS_WV9BFXEXcMi7wmyeblU8qtwS-FZj0MkgvXA4Qk_5OI8GDbVDq4cjs3HtAI8NG8YU0jZpZKsmuUtntd01uER4IpUIIbN4fUDZtK8LWl3RrBdwj7a9iOC8vJbKIpipFfqyZeRXA9Wr6kZKhssIdUzDHA-lArJPQTqlEdEzRmVWQ_JY3zD2Bg%2C.uciNXaA1uFCPKE6sbyPqFUdf9oo%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; yuidss=9623888321704065787; ymex=1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787
2023-12-31 23:36:30 UTC	1125	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:30 GMT Set-Cookie: yandexuid=5002853841704065781; Expires=Wed, 28-Dec-2033 23:36:30 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=5002853841704065781; Expires=Wed, 28-Dec-2033 23:36:30 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; Expires=Wed, 28-Dec-2033 23:36:30 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yp=1704152190.yu.6897081051704065787; Expires=Wed, 28-Dec-2033 23:36:30 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; Expires=Mon, 30-Dec-2024 23:36:30 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: sync_cookie_ok=synced; Expires=Mon, 01-Jan-2024 23:36:30 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49811	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	505	OUT	OPTIONS /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://faq-kak.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:30 UTC	453	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://faq-kak.ru Access-Control-Max-Age: 1728000 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:30 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49797	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	1271	OUT	GET /metrika/metrika_match.html HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787; yuidss=6897081051704065787; ymex=1735601788.yrts.1704065788#1735601787.yrtsi.1704065787

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49785	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	645	OUT	GET /get-yabs_performance/5117979/picd78826bff11ea66acb1619af26b2e14b/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:30 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:30 GMT Content-Type: image/webp Content-Length: 26174 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 19 Dec 2023 01:20:13 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 28ec8eeee16b32b1 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]} Timing-Allow-Origin: *
2023-12-31 23:36:30 UTC	15792	IN	Data Raw: 52 49 46 46 36 66 00 00 57 45 42 50 56 50 38 20 2a 66 00 00 70 b1 01 9d 01 2a f4 01 e4 01 3e 51 26 90 45 21 a1 0a 14 ce 9a 0c 02 82 59 db be a5 25 5a 6d 6f cc d3 dc 37 df 4b 9d 0a c6 f5 01 df 8f fc de 4c fc 1d 0f 5f 92 ef b1 e4 2f 22 bd b0 f0 07 e8 04 f0 af 44 c0 3d 01 e7 57 67 97 98 07 f6 3e 84 8c ec fe af 8a b0 15 b5 97 1e d3 d9 ef 1f fa f5 45 be af d2 33 27 f9 de fe de 9b bf cf 74 9d ff d1 ec 27 fa a7 a3 9f dc 5f 5a 8f 4c bf e6 3a 6b bd 68 7f ba 7a c6 f9 e0 7f f0 f6 be ff 79 eb 01 98 9d fb 1d e8 37 ed 5f ca ff af fb 4c f4 67 f5 de bd 0f e1 30 ef f1 7f e7 f9 8b f7 c7 3f ff e1 77 d3 fb 67 f4 1f 52 5f 20 be e2 ff 5b e9 31 f8 bf b8 3d e6 7b 0f fb 1f db bf 60 ef 6f 3e e3 ff 4b fc 77 f9 5f d9 9f 91 0f dc f3 57 f9 8f 50 4f f0 fe 87 78 19 fe 87 ff 37 b0 87 ea Data Ascii: RIFF6fWEBPVP8 fp>Q&E!Y%Zmo7KL_/"D=Wg>E3't'_ZL:khzy7_Lg0?wgR_ [1={`o>Kw_WPOx7
2023-12-31 23:36:30 UTC	10382	IN	Data Raw: 86 f1 06 e6 3d 92 9e ea a7 e8 d6 68 35 be f5 a8 4f d7 f6 b8 98 11 1b 42 0e 1a 70 bf 83 20 ee 79 91 d1 1b 45 10 ab 11 ad 7b 4d 42 17 64 cd 9d 1e e6 38 da 4c 4c 79 58 0f e8 67 77 dd 69 e2 f4 35 8a 4e 8f ee 1c a7 cc a4 cb 77 64 92 48 4f 5e 88 0c 8f a9 98 77 8e 7b c0 67 4b 2f c6 25 99 e8 6e 45 dd e3 60 a5 51 ff df cd 74 1d da b4 e6 4c f3 b8 6e d7 73 f9 70 4c 8a f2 08 76 b4 67 87 fb ef 4a 0f 2c 38 41 2c 05 71 3e fc e7 1a 08 e4 3f 48 46 19 2d a1 04 5d 47 22 8c 7a d1 6e 71 59 29 1b d6 74 bc c9 47 18 fd 2a 46 56 b6 cf c8 b3 75 3c 18 91 6b e4 2f 54 52 47 be 7e f2 f7 87 79 0a 06 9a 1e 4f 49 24 aa 0c 51 06 e5 5c 4e af 4c 71 f6 b3 83 a4 93 54 9e 2f d4 e2 b6 d1 8e 2f 4e 15 0e 78 57 42 34 f3 87 f4 35 b5 cc 43 ef 6d 32 f4 e9 4c 5c bd 60 2b 94 9f ea 2e 64 55 7d 00 18 2e Data Ascii: =h5OBp yE{MBd8LLyXgwi5NwdHO^w{gK/%nE`QtLnspLvgJ,8A,q>?HF-]G"znqY)tG*FVu<k/TRG~yOI$Q\NLqT//NxWB45Cm2L\`+.dU}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49813	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	505	OUT	OPTIONS /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://faq-kak.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	453	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https://faq-kak.ru Access-Control-Max-Age: 1728000 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:31 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49814	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	10876	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=3&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=45032506&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjE4NzI1NjIzNzQ5MTUxMjAzOAoyMDcyNzg4ODkyMDcwNTQ3MjYKMTg0NzM1ODU0NzgwNjI0NzI3CjE2OTAxNTIyNDcwODg5NzQxMgoxNjQxMjU5NzE4ODE1OTM3ODU%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A509%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A1%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B2085567069305%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:31 UTC	1356	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065791196234-769160132841531906-balancer-l7leveler-kubr-yp-vla-56-BAL-1074 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:36:31 GMT expires: Sun, 31 Dec 2023 23:36:31 GMT last-modified: Sun, 31 Dec 2023 23:36:31 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:36:31 GMT; SameSite=None; Secure ssr: true timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:36:31 UTC	5756	IN	Data Raw: 31 36 37 34 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 34 38 38 35 36 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 34 33 38 31 38 30 35 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 Data Ascii: 1674{"impressionData":{"currency":"RUB","revenueUSD":"0.000048856","precision":"estimated","revenue":"0.004381805"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836
2023-12-31 23:36:31 UTC	1596	IN	Data Raw: 36 33 35 0d 0a 38 2d 38 38 22 2c 22 72 61 74 69 6e 67 73 22 3a 7b 7d 2c 22 68 69 64 65 45 78 74 65 72 6e 61 6c 44 61 74 61 22 3a 66 61 6c 73 65 2c 22 69 73 53 6d 61 72 74 54 67 61 22 3a 66 61 6c 73 65 2c 22 67 65 6f 44 69 73 74 61 6e 63 65 22 3a 22 22 2c 22 67 65 6f 44 69 73 74 61 6e 63 65 52 65 67 75 6c 61 72 22 3a 22 22 2c 22 6c 69 6b 65 64 22 3a 22 30 22 2c 22 61 64 49 64 22 3a 22 37 32 30 35 37 36 30 35 34 39 39 35 39 31 30 30 30 22 2c 22 6f 69 64 22 3a 22 31 36 38 31 38 32 30 31 36 22 2c 22 62 61 6e 6e 65 72 46 6c 61 67 73 22 3a 22 22 2c 22 62 6c 6f 63 6b 46 61 76 69 63 6f 6e 22 3a 22 30 22 2c 22 72 65 67 69 6f 6e 22 3a 22 d0 9c d0 be d1 81 d0 ba d0 b2 d0 b0 22 2c 22 66 6c 6f 61 74 4d 61 72 6b 65 74 52 61 74 69 6e 67 22 3a 2d 31 2c 22 68 69 74 4c 6f Data Ascii: 6358-88","ratings":{},"hideExternalData":false,"isSmartTga":false,"geoDistance":"","geoDistanceRegular":"","liked":"0","adId":"72057605499591000","oid":"168182016","bannerFlags":"","blockFavicon":"0","region":"","floatMarketRating":-1,"hitLo
2023-12-31 23:36:31 UTC	6587	IN	Data Raw: 31 39 42 33 0d 0a 6c 77 47 47 32 73 41 50 55 46 37 41 2d 39 69 77 69 49 37 66 72 57 33 69 76 4e 47 6b 71 69 42 67 71 49 45 61 50 78 51 37 59 47 43 35 70 47 64 67 54 6d 53 35 77 6c 68 32 6b 69 32 58 38 37 68 72 6d 44 72 77 6c 39 4b 58 50 62 31 43 6b 61 39 31 55 44 5f 6c 52 4c 43 59 30 34 41 33 57 4e 31 73 58 4f 6b 44 54 62 65 64 38 77 61 6c 52 6d 5a 67 42 79 77 37 4c 69 33 56 46 75 64 6e 65 44 4d 6d 74 43 36 62 77 75 68 55 75 50 30 69 4b 36 6b 78 4b 59 71 53 30 4d 6d 6e 78 34 52 43 69 39 31 63 79 77 42 48 74 31 4f 43 73 6e 54 69 4c 43 41 4f 67 69 6a 69 4d 66 57 49 77 46 41 34 66 52 33 71 35 37 4d 50 32 63 53 62 6a 5a 32 34 74 54 51 6f 36 38 4a 30 70 6e 6e 51 6e 35 4a 35 43 44 6d 4d 48 36 75 4f 30 70 33 54 52 63 64 67 55 6f 79 6e 4d 2d 4d 42 5f 66 6d 46 39 Data Ascii: 19B3lwGG2sAPUF7A-9iwiI7frW3ivNGkqiBgqIEaPxQ7YGC5pGdgTmS5wlh2ki2X87hrmDrwl9KXPb1Cka91UD_lRLCY04A3WN1sXOkDTbed8walRmZgByw7Li3VFudneDMmtC6bwuhUuP0iK6kxKYqS0Mmnx4RCi91cywBHt1OCsnTiLCAOgijiMfWIwFA4fR3q57MP2cSbjZ24tTQo68J0pnnQn5J5CDmMH6uO0p3TRcdgUoynM-MB_fmF9
2023-12-31 23:36:31 UTC	1589	IN	Data Raw: 36 32 45 0d 0a 78 75 69 6c 68 63 6b 63 69 77 73 73 4b 4a 37 52 46 65 50 76 67 78 48 71 54 61 6f 7a 55 58 49 57 64 4e 66 48 35 51 32 54 55 6c 34 65 47 33 6c 72 63 59 66 30 51 71 54 76 64 35 44 53 55 61 79 64 34 43 30 73 7a 55 41 48 79 70 4c 6e 50 61 4e 49 67 6d 46 53 6f 55 62 51 65 38 4e 4c 66 4b 4c 41 70 73 57 46 35 47 53 41 64 58 46 49 77 6d 6d 45 72 6c 45 35 54 4f 4c 35 47 56 42 65 58 52 6c 6e 55 59 72 31 6f 67 41 53 53 38 36 34 7a 42 68 50 74 77 50 32 31 65 47 30 31 55 56 67 32 31 4b 52 78 78 39 43 48 35 50 56 73 58 52 4d 4d 50 6d 46 68 4f 51 7a 55 48 52 64 47 77 6a 58 6b 75 35 39 71 6e 45 5f 6e 49 4c 52 65 44 31 6d 66 72 75 79 30 6a 58 59 73 38 6b 4f 50 49 37 39 75 34 4d 64 6c 49 69 4f 6a 32 64 55 68 65 30 6e 4c 50 37 54 6a 5a 30 62 71 45 4b 39 4a 4d Data Ascii: 62ExuilhckciwssKJ7RFePvgxHqTaozUXIWdNfH5Q2TUl4eG3lrcYf0QqTvd5DSUayd4C0szUAHypLnPaNIgmFSoUbQe8NLfKLApsWF5GSAdXFIwmmErlE5TOL5GVBeXRlnUYr1ogASS864zBhPtwP21eG01UVg21KRxx9CH5PVsXRMMPmFhOQzUHRdGwjXku59qnE_nILReD1mfruy0jXYs8kOPI79u4MdlIiOj2dUhe0nLP7TjZ0bqEK9JM
2023-12-31 23:36:31 UTC	1356	IN	Data Raw: 35 34 35 0d 0a 37 32 6b 5a 62 32 6e 79 49 78 42 48 36 4a 72 66 4d 72 58 64 53 4e 76 71 36 68 4f 63 73 54 6e 46 68 47 51 6a 58 6b 4f 44 33 74 6e 4d 72 6f 6f 31 47 65 44 54 2d 68 35 38 75 30 6a 58 68 73 38 4d 48 51 49 33 35 76 71 73 68 6b 32 47 50 6c 59 78 47 65 4f 4b 6e 4e 50 52 47 6a 4a 30 62 73 55 71 31 49 73 64 65 38 45 43 77 37 43 76 33 52 36 61 39 69 77 7a 61 78 33 34 39 59 50 4f 75 6c 4f 59 58 59 63 63 75 42 38 33 4b 43 30 76 66 69 6a 4a 4a 74 46 50 4d 51 68 56 42 37 5f 71 75 37 61 58 76 6a 6e 47 30 4f 5f 63 43 38 4a 69 46 2d 62 79 30 4a 69 55 6f 61 79 30 56 6c 53 32 62 51 67 5f 66 78 30 33 69 49 6c 46 53 31 66 78 36 53 4a 73 38 37 38 44 32 2d 74 43 43 69 53 55 37 4c 54 72 78 36 71 2d 4f 41 4e 44 46 73 42 52 66 49 58 6d 4a 35 2d 76 32 71 69 52 72 76 Data Ascii: 54572kZb2nyIxBH6JrfMrXdSNvq6hOcsTnFhGQjXkOD3tnMroo1GeDT-h58u0jXhs8MHQI35vqshk2GPlYxGeOKnNPRGjJ0bsUq1Isde8ECw7Cv3R6a9iwzax349YPOulOYXYccuB83KC0vfijJJtFPMQhVB7_qu7aXvjnG0O_cC8JiF-by0JiUoay0VlS2bQg_fx03iIlFS1fx6SJs878D2-tCCiSU7LTrx6q-OANDFsBRfIXmJ5-v2qiRrv
2023-12-31 23:36:31 UTC	5245	IN	Data Raw: 31 34 37 35 0d 0a 53 6c 6b 52 78 69 6a 72 76 78 4e 34 5f 73 45 76 6b 4a 78 69 53 77 54 36 59 46 57 56 77 42 30 54 6a 75 49 66 4a 56 71 68 67 6b 44 73 34 52 4a 5f 35 77 68 4d 2d 77 34 57 6f 59 71 6f 37 67 55 59 59 30 35 30 5f 79 34 46 30 68 5f 75 2d 57 58 6b 72 56 76 4d 57 6c 73 33 50 50 70 30 77 73 6b 49 52 6b 72 77 30 50 34 5a 4b 72 50 6f 72 53 61 48 57 75 6f 46 53 31 58 75 32 78 42 58 57 75 66 56 47 36 35 6d 34 30 7e 32 22 2c 22 61 62 75 73 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 6e 2f 61 62 75 73 65 2f 57 44 4f 65 6a 49 5f 7a 4f 6f 56 58 32 4c 61 39 30 34 4b 36 30 31 43 42 41 59 4f 51 62 4b 67 62 4b 67 61 34 6d 4c 4a 32 30 33 66 45 35 4d 63 48 71 5a 46 51 47 79 4d 31 57 6b 55 34 7a 33 67 33 57 78 4e 48 57 6f 4a 64 Data Ascii: 1475SlkRxijrvxN4_sEvkJxiSwT6YFWVwB0TjuIfJVqhgkDs4RJ_5whM-w4WoYqo7gUYY050_y4F0h_u-WXkrVvMWls3PPp0wskIRkrw0P4ZKrPorSaHWuoFS1Xu2xBXWufVG65m40~2","abuseUrl":"https://yandex.ru/an/abuse/WDOejI_zOoVX2La904K601CBAYOQbKgbKga4mLJ203fE5McHqZFQGyM1WkU4z3g3WxNHWoJd
2023-12-31 23:36:31 UTC	1574	IN	Data Raw: 36 31 46 0d 0a 62 73 6b 7a 49 62 30 45 68 32 44 37 41 70 74 4c 47 6c 79 7a 77 77 76 67 73 71 74 33 64 61 78 33 35 69 56 57 45 35 72 43 4b 58 75 71 42 32 30 44 6f 61 33 35 39 4b 53 70 57 6b 65 72 6e 6a 67 39 50 65 63 62 38 4a 69 59 41 59 4c 49 52 31 37 79 41 41 6a 47 6d 79 35 7e 32 22 2c 22 76 61 6c 75 65 22 3a 22 d0 9f d0 be d0 b4 d1 80 d0 be d0 b1 d0 bd d0 b5 d0 b5 22 7d 2c 22 72 65 71 75 65 73 74 52 65 67 69 6f 6e 22 3a 22 72 75 22 2c 22 63 61 6d 70 61 69 67 6e 69 64 22 3a 22 31 36 38 31 38 32 30 31 36 22 2c 22 64 69 72 65 63 74 54 69 74 6c 65 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 69 72 65 63 74 2e 79 61 6e 64 65 78 2e 72 75 2f 3f 70 61 72 74 6e 65 72 22 2c 22 74 69 74 6c 65 22 3a 22 d0 a0 d0 b5 d0 ba d0 bb d0 b0 d0 bc d0 b0 22 7d 2c Data Ascii: 61FbskzIb0Eh2D7AptLGlyzwwvgsqt3dax35iVWE5rCKXuqB20Doa359KSpWkernjg9Pecb8JiYAYLIR17yAAjGmy5~2","value":""},"requestRegion":"ru","campaignid":"168182016","directTitle":{"url":"https://direct.yandex.ru/?partner","title":""},
2023-12-31 23:36:31 UTC	2041	IN	Data Raw: 37 46 32 0d 0a 69 63 61 74 6f 72 22 3a 22 6c 69 67 68 74 22 2c 22 74 68 65 6d 65 56 61 72 69 61 6e 74 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 74 68 65 6d 65 50 61 6c 65 74 74 65 22 3a 22 44 65 66 61 75 6c 74 22 2c 22 76 61 72 69 61 62 6c 65 73 22 3a 7b 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 32 30 36 30 64 66 22 2c 22 62 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 64 36 65 34 66 66 22 2c 22 6c 61 62 65 6c 42 61 63 6b 67 72 6f 75 6e 64 22 3a 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 29 22 2c 22 77 61 72 6e 69 6e 67 43 6f 6c 6f 72 22 3a 22 72 67 62 61 28 36 31 2c 36 33 2c 36 37 2c 30 2e 33 29 22 2c 22 66 6c 6f 6f 72 41 64 42 6f 72 64 65 72 22 Data Ascii: 7F2icator":"light","themeVariant":"default","themePalette":"Default","variables":{"background":"#ffffff","buttonText":"#2060df","buttonBackground":"#d6e4ff","labelBackground":"rgba(255, 255, 255, 0.8)","warningColor":"rgba(61,63,67,0.3)","floorAdBorder"
2023-12-31 23:36:31 UTC	4575	IN	Data Raw: 31 31 44 37 0d 0a 3a 30 2c 22 77 22 3a 31 31 32 2c 22 68 22 3a 38 34 7d 5d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 34 37 39 37 36 39 31 2f 6b 48 6f 79 5f 6f 53 62 35 5a 63 77 53 6d 72 38 36 5f 2d 37 39 51 2f 77 79 33 30 30 22 2c 22 35 33 33 22 2c 22 33 30 30 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 38 34 39 31 39 41 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 39 36 41 32 41 39 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 46 46 46 46 46 46 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 52 69 67 68 74 22 3a 22 23 36 38 36 39 36 35 46 46 22 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 Data Ascii: 11D7:0,"w":112,"h":84}]}],["https://avatars.mds.yandex.net/get-direct/4797691/kHoy_oSb5ZcwSmr86_-79Q/wy300","533","300",{"ColorWizBack":"#84919A","ColorWizButton":"#96A2A9","ColorWizButtonText":"#FFFFFF","ColorWizBackRight":"#686965FF","smart-center":{"
2023-12-31 23:36:31 UTC	1558	IN	Data Raw: 36 30 46 0d 0a 22 3a 22 35 35 2e 38 34 34 30 38 36 22 2c 22 59 32 22 3a 22 35 35 2e 38 34 38 37 30 35 22 2c 22 59 22 3a 22 35 35 2e 38 34 36 33 39 36 22 2c 22 58 31 22 3a 22 33 37 2e 36 35 31 34 33 39 22 2c 22 58 32 22 3a 22 33 37 2e 36 35 39 36 34 39 22 2c 22 58 22 3a 22 33 37 2e 36 35 35 35 34 34 22 7d 2c 22 69 73 46 61 6b 65 42 6f 64 79 22 3a 66 61 6c 73 65 2c 22 69 73 46 61 6b 65 54 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 70 61 74 68 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 6e 2f 63 6f 75 6e 74 2f 57 66 4b 65 6a 49 5f 7a 4f 6f 56 58 32 4c 61 50 30 70 71 4b 30 35 44 58 56 6f 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 44 54 4e 70 6a 56 6c 2d 46 72 58 5a 6a 53 51 4c 4a 67 5a 44 67 75 34 70 67 Data Ascii: 60F":"55.844086","Y2":"55.848705","Y":"55.846396","X1":"37.651439","X2":"37.659649","X":"37.655544"},"isFakeBody":false,"isFakeTitle":false,"pathUrl":"https://yandex.ru/an/count/WfKejI_zOoVX2LaP0pqK05DXVoOQbKgbKga4mGHzFfSxUxRVkVDTNpjVl-FrXZjSQLJgZDgu4pg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49817	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	646	OUT	GET /get-yabs_performance/9710187/2a00000188a054ad11eb06c35a3e0c2ff733/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:31 GMT Content-Type: image/webp Content-Length: 19364 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 09 Jun 2023 13:30:33 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 1c1f03ba10a45b7f NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:31 UTC	15792	IN	Data Raw: 52 49 46 46 9c 4b 00 00 57 45 42 50 56 50 38 20 90 4b 00 00 30 31 01 9d 01 2a f4 01 f2 01 3e 51 24 90 46 21 84 6a 33 54 06 01 41 2d 2d da 31 4d 9a 1e 73 55 fe bb f4 11 c4 bf f4 3a 25 b6 3f f4 fe a4 bb d3 ff 7f cb 57 8b 21 eb f2 9f f4 6f d4 1e b2 3a aa 6f 93 7e 3c 11 fa 01 d0 59 da b2 c4 d9 78 ad 5f 7b ad f1 89 a5 1e 99 c8 1f 8c 5f 71 67 17 65 2f 4f 3f e5 fd 2e ba 59 f3 ad ee af 7a df ff 08 e9 c6 be 69 fa c7 94 0f a1 7e f3 fe 9b ed b7 d1 9f d5 3a eb 2d ef f0 9f ea 79 89 f7 a9 3b df d4 f7 c3 fa ef f3 5e 81 7e df ff 55 e7 8d f2 3f b4 df f2 7c 04 b3 cf f0 7f fc 7f d0 7b 05 fb 3d f6 3f fb 7f e3 3d 8c e6 83 f6 fe a0 9f e5 3f 70 fd 94 ef d8 f6 6f 60 df 28 2f f4 bc c3 fe cb fe e3 d8 bf a6 8d a1 4c e7 66 ca 42 f2 f9 13 65 21 79 7c 89 b2 90 bc be 44 d9 48 5e 5f 22 Data Ascii: RIFFKWEBPVP8 K01*>Q$F!j3TA--1MsU:%?W!o:o~<Yx_{_qge/O?.Yzi~:-y;^~U?\|{=?=?po`(/LfBe!y\|DH^_"
2023-12-31 23:36:31 UTC	3572	IN	Data Raw: 1f 6a 90 f5 f9 a0 c1 1c 80 69 63 eb 49 e3 81 53 b4 3b 88 fb ef 07 a4 26 c0 10 b7 56 2e f5 67 5d 0a 67 f1 0e 48 45 f0 ea 39 a8 f6 f8 ce 09 cd 19 8d ec 24 d1 db a5 e7 a7 e8 36 1d 40 40 9d fa d5 d1 03 b4 c6 c1 1e 2e 27 c5 1c f5 62 3d 65 9f 22 66 69 60 57 ff 25 7e 47 0e 08 51 d5 a2 1c b0 8f 7f 59 6c 99 43 2a 00 e3 0b fe c8 3f 02 03 5d c9 86 5a d2 5d 37 45 be d1 76 1f 18 78 05 61 22 7d 59 48 aa 00 29 d3 cb 56 9b ae cb 82 1e 48 e5 a6 7c de 46 ed 12 7e de 5a e5 8d 1c b6 8a da d7 ab ab 84 83 d2 00 98 04 46 3c 3b da e6 69 05 d7 be 13 76 02 a5 eb 50 a3 19 d5 5d d2 6d a5 61 56 68 8f b4 46 57 17 50 71 ea 5c c5 53 ef 58 34 71 9b 23 39 5a d8 82 5c 90 1f e1 7e 30 81 10 9f f5 10 5b a5 2e 3e 93 f8 31 11 71 fa 7f 0f f3 b6 c5 5d 45 38 c4 b9 b1 43 fb fe da d5 d1 f7 db e2 d6 Data Ascii: jicIS;&V.g]gHE9$6@@.'b=e"fi`W%~GQYlC*?]Z]7Evxa"}YH)VH\|F~ZF<;ivP]maVhFWPq\SX4q#9Z\~0[.>1q]E8C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49816	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	645	OUT	GET /get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:31 GMT Content-Type: image/webp Content-Length: 5674 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sun, 11 Jun 2023 18:05:03 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: c5c0acb8fc64752c NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:31 UTC	5674	IN	Data Raw: 52 49 46 46 22 16 00 00 57 45 42 50 56 50 38 20 16 16 00 00 50 57 00 9d 01 2a c8 00 bc 00 3e 51 22 8f 45 a1 84 c6 13 88 06 01 41 2c ed de 93 be 05 f5 8c b0 27 09 a3 78 e9 74 10 c0 02 85 27 92 fd 80 fd 00 8f f2 c6 05 17 9d 02 ad c6 c2 a9 5d 98 fd a7 91 0b e8 7f d3 f5 f1 fe 93 78 4f f4 3e 8b 8d 39 3f e0 1d 36 5e 98 98 28 fe 5c bc 10 fc 07 83 3f 9f fd a3 fb 2f 5e 8b 77 f6 8b a8 5f 77 7f c1 f5 df fd 77 7b 7f 20 bf c6 f5 05 fc a7 f9 c7 fa 1f 16 5f ec fb 84 ac c7 fd df f0 5e c0 be c4 fd 53 fd 87 dc 97 c9 ef e3 79 a5 fc cf f9 1f 60 3f cc 6f 2d 2f 10 2f c2 ff cf f6 00 fe 61 fd c7 ff 0f f8 9f 79 4f f0 bf 6d fd 2a 7d 5d ea 7f fd fb ae 27 ee c7 b4 06 93 2d 18 f5 cb 35 ed ab c1 3b 90 5d 81 79 73 23 6f 23 14 78 5d 3c 29 95 18 a1 15 21 f6 9e 14 ca 8c 4c 0e 0f 98 aa fa Data Ascii: RIFF"WEBPVP8 PW>Q"EA,'xt']xO>9?6^(\?/^w_ww{ _^Sy`?o-//ayOm}]'-5;]ys#o#x]<)!L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49818	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	646	OUT	GET /get-yabs_performance/10314704/2a00000188a2f48cb87880501f5b2085a288/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:31 GMT Content-Type: image/webp Content-Length: 4596 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Jun 2023 01:38:35 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 4e67abba557d9ab9 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:31 UTC	4596	IN	Data Raw: 52 49 46 46 ec 11 00 00 57 45 42 50 56 50 38 20 e0 11 00 00 30 50 00 9d 01 2a c8 00 bd 00 3e 51 22 8f 45 a1 84 76 1d 7c 06 01 41 2d 26 6d 2e 53 9a fa 3a 63 9b bb 5c 7c 01 fa 01 21 03 95 6a 77 32 cd 5f 8a dd 47 7b 18 f9 9d ec 9e 9f 3f d8 6f 1d e7 91 dd 82 f5 a1 fe 3d d3 99 57 97 c3 af cb 78 53 f9 ff b8 de dd 17 6b ec 87 fc 8f 41 ff 96 7e 40 cf ef f4 3f f1 7c 39 f8 ed fe 47 a8 5f af ff c2 7f 54 f2 55 db 01 ae ff 89 ff 77 ea 0b ec 67 d0 ff da 7f 81 f6 0b fb 9f 35 3f 92 ff 17 fe f3 dc 03 86 1f ee bf f4 7d 82 3f 9a ff 71 ff ab fe 17 de 3f fc 1f da ff 4d ff 51 fe ce 7c 0c ff 3b fe f9 ff 63 fb ff 6d 5f 49 6f da 4d 0b 56 94 ad 12 b7 db d9 2b 34 4e 23 dc 5d 83 dd 68 a8 95 40 28 11 ee 2e c1 ee b4 54 4a a0 14 07 e8 ba 23 55 4a 52 15 81 97 84 9d 43 82 e2 96 eb a2 1e Data Ascii: RIFFWEBPVP8 0P*>Q"Ev\|A-&m.S:c\\|!jw2_G{?o=WxSkA~@?\|9G_TUwg5?}?q?MQ\|;cm_IoMV+4N#]h@(.TJ#UJRC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49820	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	644	OUT	GET /get-yabs_performance/9357242/piccc8b15d1bfcf5a264269aa8a33f81317/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:31 GMT Content-Type: image/webp Content-Length: 4042 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 09 Jun 2023 18:22:55 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 85e6c9efd3b19b0d NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:31 UTC	4042	IN	Data Raw: 52 49 46 46 c2 0f 00 00 57 45 42 50 56 50 38 20 b6 0f 00 00 50 4b 00 9d 01 2a c8 00 bc 00 3e 51 24 8f 44 a1 a1 0a 95 86 90 0c 02 82 59 db bd 24 4f d7 73 50 d6 91 d0 dc e1 9a 7d e0 0f d0 09 13 1c cf 60 fb 73 37 da 16 0d 8e fb 7e 92 7f d1 6e f1 e7 64 f4 b1 bd 5d fc eb d5 37 ce d2 f9 be 59 7e b1 fb 1f fa 4f 0e 7f 52 ec 00 fc 3f 19 fd 5f 6a 29 dd 1e 82 7f af ef af e4 ee a1 1e ca de 0d da 7f cd 7a 07 7b 37 f6 bf f7 be a7 1f 69 fe f3 d1 0f e4 fd 40 38 59 3e e3 ff 43 d8 2b f4 f7 ac 57 f8 3f b4 fe 9e fe aa fd 96 f8 19 fd 81 ff ad d8 b3 f7 0b d9 77 1f a9 9f 0b 6b 21 6c b2 0e 3b df 0d 07 6a 79 a7 a1 b0 68 3b 53 cd 3d 0d 83 41 da 9e 69 e8 6b eb 1c 43 51 e2 f9 f2 ed c3 a1 63 bd d0 68 3b 53 cd 3d 0b 76 82 ad 17 f1 22 79 4a 3c b5 54 bb 59 8f 0b 44 0a 17 2d e6 d3 eb ff Data Ascii: RIFFWEBPVP8 PK*>Q$DY$OsP}`s7~nd]7Y~OR?_j)z{7i@8Y>C+W?wk!l;jyh;S=AikCQch;S=v"yJ<TYD-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49822	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	709	OUT	GET /safeframe-bundles/0.83/1-1-0/render.html HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	746	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:31 GMT Content-Type: text/html Content-Length: 24108 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "68ddd6a1df957888c4f3709393c1a7d5" Expires: Wed, 31 Dec 2053 06:12:31 GMT Last-Modified: Wed, 03 Nov 2021 13:42:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2023-12-31 23:36:31 UTC	15638	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 70 75 62 6c 69 63 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 6f 6e 2c 20 31 36 20 4e 6f 76 20 32 30 32 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 Data Ascii: <!doctype html><html><head> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/> <meta http-equiv="Cache-Control" content="public"/> <meta http-equiv="Expires" content="Mon, 16 Nov 2020 00:00:01 GMT"/> <meta http-equiv="imaget
2023-12-31 23:36:31 UTC	8470	IN	Data Raw: 21 30 2c 74 2e 66 69 78 45 76 65 6e 74 3d 76 6f 69 64 20 30 2c 74 2e 66 69 78 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 69 3d 28 28 6e 3d 74 29 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 7c 7c 28 6e 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3d 72 29 2c 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 7c 7c 28 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3d 6f 29 2c 6e 2e 74 61 72 67 65 74 7c 7c 28 6e 2e 74 61 72 67 65 74 3d 6e 2e 73 72 63 45 6c 65 6d 65 6e 74 29 2c 6e 29 3b 65 2e 63 61 6c 6c 28 74 68 69 73 2c 69 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 Data Ascii: !0,t.fixEvent=void 0,t.fixEvent=function(e){return function(t){var n,i=((n=t).stopPropagation\|\|(n.stopPropagation=r),n.preventDefault\|\|(n.preventDefault=o),n.target\|\|(n.target=n.srcElement),n);e.call(this,i)}}},function(e,t,n){"use strict";t.__esModule=!0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49819	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	645	OUT	GET /get-yabs_performance/9745244/pic73abb14c61340fef3dd851efc0e02f24/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:31 GMT Content-Type: image/webp Content-Length: 19906 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Jun 2023 03:34:19 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: dbddb683b34cadbd NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:36:31 UTC	15792	IN	Data Raw: 52 49 46 46 ba 4d 00 00 57 45 42 50 56 50 38 20 ae 4d 00 00 30 51 01 9d 01 2a bf 01 f4 01 3e 51 24 90 46 21 a1 08 f4 4e bc 0c 02 82 5a 5b b5 dd ed a0 f8 ae 1d f8 5f ec b8 c7 7e ff 50 65 a1 cd ef 22 b4 6d f3 29 d8 40 cf a3 7f a2 fd 80 fd 00 e8 16 b3 9a 81 85 f3 24 da 2b 99 5d 24 cf f0 fa 3d a1 0b 73 72 b5 40 9f 50 9c ce e1 be db cb a6 07 3d 39 7f 8a f4 c6 f4 3b ea 67 fb 9f 45 96 ed ff ad 4f f2 bf 54 0f 3b ff 4c 8c 24 cf d9 1f 41 bf 5e fe 73 fd b7 84 3f b2 fe 6f cc 62 df ff 39 fe 97 98 de 11 df 80 bf ca ef af f6 6f e9 7d 02 fd cf fe b3 d1 87 f3 3f 6b bb f0 b5 ef f5 5f b6 9e c2 3e d8 7d b3 f6 33 da 87 f5 bc ee fe b7 d4 0f ce 4f 08 ea 08 7e 92 f5 95 ff 83 ce 4f ed bf f1 78 2d 5d 84 ad 71 e2 1c 23 9b 07 47 f5 71 e2 1c 23 9b 07 47 f5 71 e2 1d ed a3 fe 32 14 88 Data Ascii: RIFFMWEBPVP8 M0Q*>Q$F!NZ[_~Pe"m)@$+]$=sr@P=9;gEOT;L$A^s?ob9o}?k_>}3O~Ox-]q#Gq#Gq2
2023-12-31 23:36:31 UTC	4114	IN	Data Raw: 08 74 e3 c6 0c 7c f6 2f c1 65 3e 80 4b 40 33 ea bc 9e 58 d2 c4 4e cb 1c 63 7c ea d3 55 26 d2 dd 02 aa 14 5e 2c 0b f2 96 88 b4 f3 b9 11 f4 45 43 66 38 75 6b 59 e2 6e 2d f3 4e d1 bd 65 ac 77 e9 f5 6b d6 63 7f 48 e0 d4 37 0d b1 6d 31 5f de 5b b5 96 d6 22 b9 ee 03 ef 0d 5d 00 1f 20 89 c6 d1 e9 a4 b1 d6 85 83 aa f5 cf 16 9f 14 49 35 5c e0 32 85 6e a0 62 cc cf f0 03 5c f0 7e 41 77 65 e2 1a 2c 9d 16 c8 34 24 3c c0 e2 41 19 58 d2 46 ab b8 3b 20 17 9d 11 dd 0c 4f 75 05 b9 de 21 eb 84 96 c5 4e 32 e2 da a4 a8 0d 92 92 6d 85 a9 52 d3 31 19 5a 16 04 fb db 77 47 a4 30 34 a8 6d 23 68 b3 04 e8 52 25 76 f6 8a bc e2 e3 29 d2 f0 1c 4a b4 74 7f 6b 40 5f 59 5a ba cc bb 0d 54 c4 2e 9a 7e c7 f5 55 94 67 6e 0b 74 72 57 79 65 8c bd 16 b6 4c 22 e8 b4 59 74 28 41 2a 19 74 a4 e4 8a Data Ascii: t\|/e>K@3XNc\|U&^,ECf8ukYn-NewkcH7m1_["] I5\2nb\~Awe,4$<AXF; Ou!N2mR1ZwG04m#hR%v)Jtk@_YZT.~UgntrWyeL"Yt(A*t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49821	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:30 UTC	2526	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065788_d84efc3243d59a09a663716ca77dd204a227e6f1afa39970976fdd6859c79c4f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003629%3Aet%3A1704065790%3Ac%3A1%3Arn%3A206004717%3Arqn%3A2%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065790%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(158700)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; i=sujfgLJIy45f7nea77WUZkUd3WcdeGeX7u5LOF+dwYhEyO97ZBB0w7u2VfuUxw3rwCEo2XKARulNxUzzApp0g201Omo=; yandexuid=6897081051704065787; yuidss=6897081051704065787; ymex=1735601788.yrts.1704065788#1735601787.yrtsi.1704065787
2023-12-31 23:36:31 UTC	1144	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:31 GMT Expires: Sun, 31-Dec-2023 23:36:31 GMT Last-Modified: Sun, 31-Dec-2023 23:36:31 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:36:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49826	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:31 UTC	2697	OUT	GET /watch/95527089/1?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003623%3Aet%3A1704065783%3Ac%3A1%3Arn%3A39487341%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Afp%3A7384%3Arqnl%3A1%3Ast%3A1704065785%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr%2814%29mc%28p-1%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29ecs%280%29ti%281%29&redirnss=1 HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
2023-12-31 23:36:31 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 435 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:31 GMT Expires: Sun, 31-Dec-2023 23:36:31 GMT Last-Modified: Sun, 31-Dec-2023 23:36:31 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:31 UTC	435	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 65 57 58 78 4d 6d 4e 59 33 46 6e 67 46 50 42 4f 72 41 74 73 4b 69 37 4b 7a 66 61 79 30 4b 33 4e 50 56 51 44 45 54 5a 61 2b 51 47 6d 72 4e 4a 49 33 51 6a 38 45 41 31 32 6f 73 59 42 6d 45 47 58 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"eWXxMmNY3FngFPBOrAtsKi7Kzfay0K3NPVQDETZa+QGmrNJI3Qj8EA12osYBmEGX"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49827	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:31 UTC	1390	OUT	GET /sync_cookie_image_decide?token=10234.aUB3SqFXQihpV7u28KLmxTeuijO6AILiIGSmXB45GAmCA-XNN_aZ3BsS_WV9BFXEXcMi7wmyeblU8qtwS-FZj0MkgvXA4Qk_5OI8GDbVDq4cjs3HtAI8NG8YU0jZpZKsmuUtntd01uER4IpUIIbN4fUDZtK8LWl3RrBdwj7a9iOC8vJbKIpipFfqyZeRXA9Wr6kZKhssIdUzDHA-lArJPQTqlEdEzRmVWQ_JY3zD2Bg%2C.uciNXaA1uFCPKE6sbyPqFUdf9oo%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
2023-12-31 23:36:31 UTC	1125	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:31 GMT Set-Cookie: yandexuid=5002853841704065781; Expires=Wed, 28-Dec-2033 23:36:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=5002853841704065781; Expires=Wed, 28-Dec-2033 23:36:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; Expires=Wed, 28-Dec-2033 23:36:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yp=1704152191.yu.5002853841704065781; Expires=Wed, 28-Dec-2033 23:36:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; Expires=Mon, 30-Dec-2024 23:36:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: sync_cookie_ok=synced; Expires=Mon, 01-Jan-2024 23:36:31 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49825	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:31 UTC	2395	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003627%3Aet%3A1704065788%3Ac%3A1%3Arn%3A593407504%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065788%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(75800)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
2023-12-31 23:36:31 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:31 GMT Expires: Sun, 31-Dec-2023 23:36:31 GMT Last-Modified: Sun, 31-Dec-2023 23:36:31 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:31 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 33 6f 57 76 31 52 55 55 6d 6c 50 45 4e 43 44 6b 52 4f 47 6f 69 33 5a 38 73 34 54 36 33 45 36 4f 4c 42 42 63 36 39 73 38 72 64 2b 50 72 4c 5a 36 47 6d 33 4f 52 35 50 64 37 36 38 41 69 51 32 4f 22 2c 20 22 62 22 3a 22 6b 4d 6f 70 59 6d 58 71 2b 63 4f 56 37 74 55 69 50 6c 41 4b 7a 56 54 48 4a 4c 7a 50 6f 54 4c 4f 4b 38 75 66 43 57 38 4d 4b 36 49 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 37 39 31 5f 39 34 31 39 38 62 61 36 37 62 39 34 61 33 37 31 37 30 61 64 66 38 64 36 64 34 35 36 38 36 66 38 31 36 33 63 33 66 35 37 62 35 31 35 63 34 39 34 63 38 38 34 38 30 65 30 36 37 61 33 66 65 35 65 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"3oWv1RUUmlPENCDkROGoi3Z8s4T63E6OLBBc69s8rd+PrLZ6Gm3OR5Pd768AiQ2O", "b":"kMopYmXq+cOV7tUiPlAKzVTHJLzPoTLOK8ufCW8MK6I="},"eu":2,"hittoken":"1704065791_94198ba67b94a37170adf8d6d45686f8163c3f57b515c494c88480e067a3fe5e"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49823	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:31 UTC	764	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 284 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:31 UTC	284	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 36 36 36 39 30 32 36 34 32 33 30 38 36 34 22 2c 22 44 75 69 64 22 3a 22 30 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 36 36 36 39 30 33 36 36 34 36 37 30 32 34 22 2c 22 49 6d 70 49 44 22 3a 22 31 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 65 64 44 61 74 61 22 3a 5b 7b 22 43 6f 6e 66 69 72 6d Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836266690264230864","Duid":"0","RtbBidReqID":"7836266690366467024","ImpID":"1","CryptaIDv2":"0"},"VariedData":[{"Confirm
2023-12-31 23:36:32 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:31 GMT Expires: Sun, 31 Dec 2023 23:36:31 GMT Last-Modified: Sun, 31 Dec 2023 23:36:31 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49815	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:31 UTC	616	OUT	GET /favicon/xn--80atu9c.xn--p1ai?size=120&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:31 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:31 UTC	8074	IN	Data Raw: 31 46 38 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 2c b1 49 44 41 54 78 01 ec 5b 03 9c 24 c9 f2 8e ac e6 78 56 e7 bb ff b3 ed f7 ce 36 9e 6d db b6 6d db b6 8d b3 6d df f2 66 e7 46 cd ea 52 c4 bf 6f eb a2 27 e6 fb 65 f7 9c 1d b3 b9 55 89 42 f7 97 5f 28 b3 1d dd c6 e4 9f a7 6f a8 cc b7 e2 72 a9 e0 b6 13 a1 7b d5 db f1 8e 85 42 f0 70 e7 dc 2e 9d 38 dd a1 1d a5 c3 cc 42 22 42 b4 e5 df 96 f3 bc de 15 de d2 2e 4b 8e 42 44 c2 8b e3 84 f2 be 4a a9 90 0e 57 8a 1b 88 e8 cc 76 27 f9 e7 f8 48 79 ba 5a 2c 9c db ea 24 9b 56 8d 57 c3 a1 4a 29 7e fc ae f7 11 ba 15 cb 6d 02 e0 e3 2e 98 72 b5 66 32 39 df 8a 56 54 4b 85 fd da 71 f6 d8 66 3b b9 57 10 b8 bb a6 19 af 4c 59 0a 44 e2 44 c8 d1 12 90 88 78 cb Data Ascii: 1F82PNGIHDRxx9d6,IDATx[$xV6mmmfFRo'eUB_(or{Bp.8B"B.KBDJWv'HyZ,$VWJ)~m.rf29VTKqf;WLYDDx
2023-12-31 23:36:31 UTC	3439	IN	Data Raw: 44 36 38 0d 0a 24 22 d3 c2 4f 09 8d 04 65 6e 65 d2 7a d4 0e ad 45 54 dd 2b d8 d2 7a ec d3 93 66 e0 84 b3 3c ff e6 2c 0f 86 4e 1d 8c bc f7 20 eb 53 9c 3c 2a b5 50 ae 9e b7 e1 d3 e6 9a eb ac 43 23 0e 3f 16 53 48 8e ef de 1f b4 c8 17 22 3f 3e 66 79 61 c5 f3 ed 19 be e7 26 cf 4a e5 d6 e5 1f 7f bd c4 b5 bc b0 ea 84 ca 86 d0 47 e8 8a f4 90 68 d8 f2 c3 24 37 4d 70 bf b4 de cb 74 39 6b 8b a6 b0 83 85 aa 68 44 2d 9b 8d 1d 9d 04 a4 93 18 36 03 b5 e5 43 f6 e8 b7 f3 bd 97 1d d7 e8 88 07 7e ee 9d 02 14 34 5e 2f ab 6e 3c 49 63 57 8e d6 48 af 8b 9d 3f 27 e6 fb 92 b3 74 22 37 22 ee 0a c0 52 6f 34 ac 0b ce 1c b2 8b 09 28 e6 52 98 fb 0a 82 45 72 38 84 2e 02 16 76 96 8b d3 d4 6a 15 e2 70 3d 73 1e 23 40 f4 8e 44 ba 9c e9 04 fe 34 0b 11 e8 51 8f bc 3e d5 60 0e 82 f8 63 37 64 Data Ascii: D68$"OenezET+zf<,N S<*PC#?SH"?>fya&JGh$7Mpt9khD-6C~4^/n<IcWH?'t"7"Ro4(REr8.vjp=s#@D4Q>`c7d
2023-12-31 23:36:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49828	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:31 UTC	646	OUT	GET /get-yabs_performance/5122202/2a00000188a2f2dd6c72992bc3482f2ff4f2/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:31 GMT Content-Type: image/webp Content-Length: 19368 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 13 Jun 2023 21:34:52 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 39f8f54edbc32de9 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]} Timing-Allow-Origin: *
2023-12-31 23:36:32 UTC	15792	IN	Data Raw: 52 49 46 46 a0 4b 00 00 57 45 42 50 56 50 38 20 94 4b 00 00 50 51 01 9d 01 2a f4 01 e8 01 3e 51 24 90 45 a1 a1 09 3d 3a b2 0c 02 82 5a 5b a4 5f fe 79 f0 b6 5c fd 6f f7 3b 40 3e 5c b7 a3 80 38 62 8e 83 d2 87 c9 b9 ec 78 da be 3b 57 de 40 cb 80 de 6f 00 7e 80 74 01 fa 3d 83 fd 07 fc 05 fb 86 20 cc 93 cc af d7 8e 9a ff e7 7d 13 7e 87 d9 a9 8c 6f f2 0f d4 fd 58 b0 ad dd 79 0a d1 cf 5d fd c1 20 9c 75 bb eb 30 fb 42 fa 99 ff 55 e9 25 d2 a3 9e 13 74 b3 d7 23 f8 ef 4e f7 a5 c6 13 17 90 7f ab 7f 25 fe 9b ed a3 d2 9f d4 7a e8 3f 81 c6 3f c0 ff 97 e6 4f dd 67 43 fb 7b fe b7 f6 8b c9 bf db 3f 97 f4 11 f6 e7 fa 7f b7 ff 95 6f b2 ed 8b d8 ff d3 ff e9 f5 0b f6 93 ec 5f f2 7f c6 fe 54 fc 4e fe bf 9b 1f c9 7a 81 7f 80 f3 ff c4 87 f0 ff f9 7d 85 7f a6 fa 44 ff a7 e6 67 f6 Data Ascii: RIFFKWEBPVP8 KPQ*>Q$E=:Z[_y\o;@>\8bx;W@o~t= }~oXy] u0BU%t#N%z??OgC{?o_TNz}Dg
2023-12-31 23:36:32 UTC	3576	IN	Data Raw: 93 f1 1f 73 bc 1a 96 75 17 70 df a2 95 2d db 75 80 ba 6e c9 32 3c a9 86 14 e9 7a 5b 0f b7 42 0a 08 3f 6b ad 3d 56 bc 4b 2f c9 51 68 34 e0 94 21 13 c3 73 38 a6 b8 17 1f ef 84 cb 78 a0 88 67 45 3e fa ac 0c 44 f7 8e 74 14 5d 88 a1 85 b6 09 54 52 29 cf 33 ef 84 49 66 c8 b1 cd db cd b2 bc 64 c8 2a c9 9b 50 dd 49 76 c4 80 e3 8d 8c 95 5d 26 69 ac 92 4e d7 fb 79 9a 94 0d 34 c2 ea 8e 08 fe 67 16 10 03 10 2c be 94 30 e1 8d de 71 31 97 0a 11 c6 d8 17 23 c1 10 ef c4 6a 05 c2 7a 40 4a 3d d2 47 5d c9 ab 55 4e b7 4f fe a3 a6 6d 28 2c 23 f0 fb 69 70 cb 30 fc aa 25 57 74 98 c9 6e 2f f4 a1 b0 29 69 e2 b0 86 c1 74 eb ac 11 87 15 1a e2 37 0b ed da 6c b9 c9 15 34 90 7d 1b e5 0b bf 83 b0 54 8c 96 c5 d4 24 b3 3a 0d 80 17 89 9a c5 98 d8 87 e6 c2 5d 95 1d 29 96 7f b9 e4 53 92 de Data Ascii: sup-un2<z[B?k=VK/Qh4!s8xgE>Dt]TR)3Ifd*PIv]&iNy4g,0q1#jz@J=G]UNOm(,#ip0%Wtn/)it7l4}T$:])S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49829	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:31 UTC	415	OUT	GET /get-yabs_performance/5117979/picd78826bff11ea66acb1619af26b2e14b/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: image/jpeg Content-Length: 35034 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 19 Dec 2023 02:26:49 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: d4b11930e025afa8 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:33 UTC	15792	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 e4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 01 02 03 04 06 07 08 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f6 50 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"P
2023-12-31 23:36:33 UTC	16384	IN	Data Raw: 70 48 7f b2 1d 19 e9 2e 58 04 06 f8 92 1c 1a 23 e2 13 16 10 5b d6 5c ec c0 7d 50 2e 7b d4 36 92 47 6d b8 98 04 03 a7 fb c2 12 29 6a 90 00 42 ad b1 00 c6 c8 ba eb 3d ca 7c 33 26 17 18 bd 21 17 6a 01 a0 85 68 07 e6 28 68 e9 c8 81 c3 25 b4 b4 2e 41 e4 c2 48 11 0a e1 15 41 94 7b 86 06 7e 3f 8c b8 97 08 a5 e3 b6 13 24 52 ed 46 a0 56 4b a8 49 22 40 2d ed 13 a9 a3 8f e8 1b e5 9e c7 ac 2e 49 23 bd f9 94 24 70 1f c4 16 4c 24 28 81 f1 00 25 08 34 3d 41 c4 a3 99 a1 aa 99 3a 82 11 aa c0 f5 da ca 54 f8 84 72 f4 9f 11 90 67 33 fa ca 36 11 ec 88 78 85 61 57 bc a2 3b 90 7d 24 04 3e f3 e1 03 dd f9 10 f2 05 49 52 30 1f 68 00 eb 00 1f 30 91 30 28 e5 1e 4c 50 89 6b fe b0 23 97 14 54 a3 5e c6 3f 83 2d 63 2c f8 26 70 84 f7 2e a1 6e 8c 1d f2 38 9c 32 20 bc 92 16 93 53 00 d9 51 Data Ascii: pH.X#[\}P.{6Gm)jB=\|3&!jh(h%.AHA{~?$RFVKI"@-.I#$pL$(%4=A:Trg36xaW;}$>IR0h00(LPk#T^?-c,&p.n82 SQ
2023-12-31 23:36:33 UTC	2858	IN	Data Raw: 0d 5f 99 81 80 85 a8 13 5c 04 40 6d 0d c3 d3 29 85 67 12 ea 21 5a ce 14 71 65 50 36 65 c4 64 f1 e0 59 5a 89 c3 ae 62 ae 20 17 45 6c 7a ed af 88 10 d8 b7 10 25 60 8b 2a b4 19 57 7e 23 c4 55 55 63 b4 41 54 04 ef 48 d0 18 ba fc 43 f6 0f 26 73 0c 31 14 a8 32 04 80 d0 b3 94 24 c0 0a e5 e2 34 fa 80 63 76 30 be 8c 47 10 4d e9 e9 50 0c 81 64 d3 fb 87 54 22 83 42 fa 44 62 b2 d7 a5 fc c1 dc 02 e3 0d 8f 8a 8d 04 5c d1 17 b3 06 1e 4e 8c 0e 4a a8 9e c9 7e 00 0e 12 b2 f7 86 ba c5 0a c3 32 e1 cd c2 9e 84 b4 a6 0d 89 d5 02 82 cf 74 5a 52 58 2c 6d e2 90 84 02 bb 05 ec b8 61 e6 a5 6a 8e b2 88 52 15 b7 c5 15 4c 9f 69 c4 fc 53 cb f1 4f fe 1c 84 28 df 5d c7 48 42 4f 32 83 a4 45 06 05 2e 8c 61 8f 59 83 81 57 e7 71 4a 35 0b 67 a9 b8 7f 81 33 8c 22 bb 42 56 48 6c 94 2d 74 b2 c6 Data Ascii: _\@m)g!ZqeP6edYZb Elz%`*W~#UUcATHC&s12$4cv0GMPdT"BDb\NJ~2tZRX,majRLiSO(]HBO2E.aYWqJ5g3"BVHl-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49830	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	764	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 309 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:32 UTC	309	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 36 36 36 39 30 32 36 34 32 33 30 38 36 34 22 2c 22 44 75 69 64 22 3a 22 30 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 36 36 36 39 30 33 36 36 34 36 37 30 32 34 22 2c 22 49 6d 70 49 44 22 3a 22 31 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 65 64 44 61 74 61 22 3a 5b 7b 22 43 6f 6e 66 69 72 6d Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836266690264230864","Duid":"0","RtbBidReqID":"7836266690366467024","ImpID":"1","CryptaIDv2":"0"},"VariedData":[{"Confirm
2023-12-31 23:36:32 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:32 GMT Expires: Sun, 31 Dec 2023 23:36:32 GMT Last-Modified: Sun, 31 Dec 2023 23:36:32 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49831	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	645	OUT	GET /get-yabs_performance/10070214/picce57669c9a2289934f175395af242b91/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: image/webp Content-Length: 3844 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 09 Jun 2023 18:29:21 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 12f712c2aefaecd8 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:32 UTC	3844	IN	Data Raw: 52 49 46 46 fc 0e 00 00 57 45 42 50 56 50 38 20 f0 0e 00 00 10 48 00 9d 01 2a c8 00 bf 00 3e 51 22 8e 44 21 a1 0c 5d 76 56 0c 02 82 59 db 8c 3c cb d9 bf 00 7e 80 10 d7 6c dd 4f f6 c2 72 74 70 7a 5f 27 17 d9 f5 1b b8 9b 9d 03 75 27 7b 2a af 07 d3 ff 7b ff 4b e2 4f e9 7d 83 77 73 b4 7e d0 7d 9f fc 8b ca 47 83 1e e3 0b 3b fe fb d4 3b d8 cf b2 7a 35 4c fb f0 9a 12 33 67 fb cf 97 df 59 ef f5 3c c5 7e d9 fe ab 82 a6 6f 6f 14 97 97 a2 d5 9b 3d 46 f1 06 55 5e 9b fb 48 f7 17 1f 9b fb 48 f7 17 1f 9b fb 48 f7 17 1f 9b fb 46 05 37 bf c2 f8 fc 86 93 ce 27 a2 4b 2a 7d 9d 87 0b 8c 85 30 df 09 3e 3e 0c 79 1f 86 9a 6e ef 46 e1 b5 f2 41 4b 4c 5b b3 51 5d c1 75 97 d7 9f ee a6 bf 80 5b 63 2c 78 30 29 32 08 f9 69 de c3 91 33 e0 ad f0 e4 7a 54 01 16 75 8d 83 f2 7e da ea f5 5e Data Ascii: RIFFWEBPVP8 H>Q"D!]vVY<~lOrtpz_'u'{{KO}ws~}G;;z5L3gY<~oo=FU^HHHF7'K*}0>>ynFAKL[Q]u[c,x0)2i3zTu~^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49832	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	2504	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065788_d84efc3243d59a09a663716ca77dd204a227e6f1afa39970976fdd6859c79c4f&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003629%3Aet%3A1704065790%3Ac%3A1%3Arn%3A206004717%3Arqn%3A2%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065790%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(158700)aw(1)rcm(1)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yp=1704152190.yu.6897081051704065787; ymex=1706657790.oyu.6897081051704065787#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==
2023-12-31 23:36:32 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:32 GMT Expires: Sun, 31-Dec-2023 23:36:32 GMT Last-Modified: Sun, 31-Dec-2023 23:36:32 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49833	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	416	OUT	GET /get-yabs_performance/10314704/2a00000188a2f48cb87880501f5b2085a288/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: image/jpeg Content-Length: 6749 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Jun 2023 01:38:35 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: d47740c5b0cc2423 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:32 UTC	6749	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 bd 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 07 02 01 08 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ec a0 00 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49835	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	414	OUT	GET /get-yabs_performance/9357242/piccc8b15d1bfcf5a264269aa8a33f81317/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: image/jpeg Content-Length: 6126 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 09 Jun 2023 18:22:55 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 1f8aa473856b3cc2 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:32 UTC	6126	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 bc 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 02 03 04 06 07 01 08 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ec a0 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49834	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	415	OUT	GET /get-yabs_performance/10311244/picb4fc97d5f924a12b286fc0442d72d021/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: image/jpeg Content-Length: 7770 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sun, 11 Jun 2023 18:05:03 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: ace255c29427c3d4 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:32 UTC	7770	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 bc 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 ff c4 00 17 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ec a0 00 00 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49836	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	416	OUT	GET /get-yabs_performance/9710187/2a00000188a054ad11eb06c35a3e0c2ff733/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: image/jpeg Content-Length: 28771 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Wed, 21 Jun 2023 18:53:00 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 8abe9a2f8c8e853c NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:32 UTC	15792	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 f2 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 01 02 03 04 05 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f6 50 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"P
2023-12-31 23:36:33 UTC	12979	IN	Data Raw: b5 2a 6f 72 5b 27 70 4f b1 0a 74 61 04 88 1c f3 05 60 ac 16 e5 4f 94 6a e7 b1 41 cc 50 b9 8c 1c 22 a8 27 45 6c 29 72 a0 86 f4 10 89 68 bb 21 29 b8 d2 b6 0e b7 3f f8 44 e1 28 54 d3 93 14 aa 37 1d 02 65 42 eb ae 82 50 c5 6d 02 17 5f 24 4c 4a c9 e4 2a 31 fe 88 76 3c 7f cb e9 b4 3d 81 a2 21 c1 5e d6 bf 6f 4a 2b 50 fd c2 e1 45 35 3c ca d5 f6 21 82 aa b2 6d 80 af 71 80 bb 64 5c 5f b1 37 d6 b8 10 b5 4c 66 e4 4b d6 15 62 f9 3e 94 c5 08 49 3f 72 05 66 ae a2 2a a3 16 93 68 40 49 4a 20 bc 41 44 33 22 24 d7 c1 99 1e 10 07 5b 85 d8 1d d0 9d f1 1d f1 d4 29 0a ff 00 80 e2 49 e1 d3 4a b2 21 51 70 ab dc ca a2 d9 4d 36 14 d4 7b 5b 14 d0 7c 3d d9 c0 85 53 9e f0 7c 2b 82 c3 c6 5e 9d 7f 05 9f b5 41 0d 29 82 ac e0 80 fd a0 b4 3b bd 9f 70 a3 a1 8d 53 91 62 73 eb 62 8a 46 19 a1 Data Ascii: or['pOta`OjAP"'El)rh!)?D(T7eBPm_$LJ1v<=!^oJ+PE5<!mqd\_7LfKb>I?rf*h@IJ AD3"$[)IJ!QpM6{[\|=S\|+^A);pSbsbF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49837	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	415	OUT	GET /get-yabs_performance/9745244/pic73abb14c61340fef3dd851efc0e02f24/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: image/jpeg Content-Length: 27841 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Jun 2023 07:00:59 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: e5edc29cc7eb3f7b NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:32 UTC	15792	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 f4 01 bf 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 07 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f6 50 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"P
2023-12-31 23:36:33 UTC	12049	IN	Data Raw: 68 7b c3 a8 bf 13 6a 9d 99 19 23 c7 a4 22 f2 c4 8b 4f 88 43 b3 9e a3 da 3a 0b a7 24 4e 3e 45 3e b9 0c 88 12 d1 21 b4 b0 ee 3c db bb 1d 07 53 d8 68 27 81 4a 79 08 99 32 d2 ab 88 bd 46 42 e8 10 a9 63 02 7a 84 85 f0 1d d1 3d 85 bb d6 04 a8 8a 4e e1 45 65 ee 22 bf 21 5c d7 57 04 6e 7e 04 ab fa 93 82 79 13 78 dc 79 0d 8c 6a d4 84 d4 82 ea 6e 60 88 9e a2 8c 12 e1 97 d3 a8 8a 59 8c 07 f7 85 fe dd c2 2e be 86 5d df 64 a9 b6 91 be 8a 5c 9a cd 9e a4 10 5d 12 64 16 9d 82 f7 2d 45 74 f7 94 11 e2 6e 1a 49 94 7d 2a 61 cf 51 86 45 40 de 34 a1 6e b6 9a 0b c4 89 6a 89 34 90 61 89 45 a9 b5 c8 d5 41 bc 90 b3 bc 19 8c 66 0c ee e4 66 a7 02 2b af 0f 47 68 7b 94 ef e9 f0 09 99 c9 c3 74 1e b5 02 ec 97 b7 f4 c2 ac 3f 4d 02 a4 fb 19 4a 3a 10 d3 cd 27 a1 b4 f4 55 94 d8 9c ce 01 80 Data Ascii: h{j#"OC:$N>E>!<Sh'Jy2FBcz=NEe"!\Wn~yxyjn`Y.]d\]d-EtnI}*aQE@4nj4aEAff+Gh{t?MJ:'U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49838	178.154.131.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	581	OUT	GET /q/set/s/rsya-tag-users/bundle.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yastatic.net/safeframe-bundles/0.83/1-1-0/render.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	755	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: application/x-javascript Content-Length: 104498 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31556952 Etag: "fad15dadf56fc1d71be6b240cc30b915" Expires: Wed, 03 Jan 2024 11:36:33 GMT Last-Modified: Tue, 18 Jul 2023 19:47:42 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Nginx-Request-Id: 2dd60c61b70c31e6 Accept-Ranges: bytes
2023-12-31 23:36:33 UTC	15629	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 65 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 65 2e 6d 3d 74 2c 65 2e 63 3d 6e 2c 65 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 65 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 65 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function e(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,e),i.l=!0,i.exports}e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=fun
2023-12-31 23:36:33 UTC	16384	IN	Data Raw: 3d 65 28 31 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 72 28 74 2c 69 2c 6e 5b 69 5d 2c 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 34 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 21 72 28 74 29 7c 7c 74 2e 5f 74 21 3d 3d 6e 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 6e 2b 22 20 72 65 71 75 69 72 65 64 21 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 38 29 2e 66 2c 69 3d 65 28 31 34 29 2c 6f 3d 65 28 35 29 Data Ascii: =e(12);t.exports=function(t,n,e){for(var i in n)r(t,i,n[i],e);return t}},function(t,n,e){var r=e(4);t.exports=function(t,n){if(!r(t)\|\|t._t!==n)throw TypeError("Incompatible receiver, "+n+" required!");return t}},function(t,n,e){var r=e(8).f,i=e(14),o=e(5)
2023-12-31 23:36:33 UTC	16384	IN	Data Raw: 74 49 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 7a 28 74 68 69 73 2c 32 2c 74 2c 43 2c 6e 2c 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 2c 73 65 74 55 69 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 7a 28 74 68 69 73 2c 32 2c 74 2c 43 2c 6e 2c 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 2c 73 65 74 49 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 7a 28 74 68 69 73 2c 34 2c 74 2c 42 2c 6e 2c 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 2c 73 65 74 55 69 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 7a 28 74 68 69 73 2c 34 2c 74 2c 42 2c 6e 2c 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 2c 73 65 74 46 6c 6f 61 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 7a 28 74 68 69 73 2c 34 2c 74 2c 57 2c 6e 2c 61 72 67 Data Ascii: tInt16:function(t,n){z(this,2,t,C,n,arguments[2])},setUint16:function(t,n){z(this,2,t,C,n,arguments[2])},setInt32:function(t,n){z(this,4,t,B,n,arguments[2])},setUint32:function(t,n){z(this,4,t,B,n,arguments[2])},setFloat32:function(t,n){z(this,4,t,W,n,arg
2023-12-31 23:36:33 UTC	16384	IN	Data Raw: 29 2c 69 3d 65 28 33 34 29 3b 65 28 32 35 29 28 22 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 72 28 74 29 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 65 28 32 35 29 28 22 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 39 38 29 2e 66 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 34 29 2c 69 3d 65 28 33 30 29 2e 6f 6e 46 72 65 65 7a 65 3b 65 28 32 35 29 28 22 66 72 65 65 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 72 28 6e 29 3f 74 28 69 28 6e Data Ascii: ),i=e(34);e(25)("keys",function(){return function(t){return i(r(t))}})},function(t,n,e){e(25)("getOwnPropertyNames",function(){return e(98).f})},function(t,n,e){var r=e(4),i=e(30).onFreeze;e(25)("freeze",function(t){return function(n){return t&&r(n)?t(i(n
2023-12-31 23:36:33 UTC	16384	IN	Data Raw: 79 28 31 29 5b 6f 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 75 3d 21 31 7d 29 2c 72 28 72 2e 50 2b 72 2e 46 2a 75 2c 22 41 72 72 61 79 22 2c 7b 66 69 6e 64 49 6e 64 65 78 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 75 6e 64 65 66 69 6e 65 64 29 7d 7d 29 2c 65 28 33 31 29 28 6f 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 65 28 33 38 29 28 22 41 72 72 61 79 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 32 29 2c 69 3d 65 28 37 33 29 2c 6f 3d 65 28 38 29 2e 66 2c 75 3d 65 28 33 37 29 2e 66 2c 63 3d 65 28 35 36 29 2c 66 3d 65 28 35 30 29 2c 61 3d 72 2e 52 65 67 45 78 70 2c 73 Data Ascii: y(1)[o](function(){u=!1}),r(r.P+r.F*u,"Array",{findIndex:function(t){return i(this,t,arguments.length>1?arguments[1]:undefined)}}),e(31)(o)},function(t,n,e){e(38)("Array")},function(t,n,e){var r=e(2),i=e(73),o=e(8).f,u=e(37).f,c=e(56),f=e(50),a=r.RegExp,s
2023-12-31 23:36:33 UTC	16384	IN	Data Raw: 75 72 6e 20 6e 2e 67 65 74 7d 77 68 69 6c 65 28 65 3d 75 28 65 29 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 30 29 2c 69 3d 65 28 39 29 2c 6f 3d 65 28 32 33 29 2c 75 3d 65 28 31 37 29 2c 63 3d 65 28 31 36 29 2e 66 3b 65 28 37 29 26 26 72 28 72 2e 50 2b 65 28 36 33 29 2c 22 4f 62 6a 65 63 74 22 2c 7b 5f 5f 6c 6f 6f 6b 75 70 53 65 74 74 65 72 5f 5f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 65 3d 69 28 74 68 69 73 29 2c 72 3d 6f 28 74 2c 21 30 29 3b 64 6f 7b 69 66 28 6e 3d 63 28 65 2c 72 29 29 72 65 74 75 72 6e 20 6e 2e 73 65 74 7d 77 68 69 6c 65 28 65 3d 75 28 65 29 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 65 28 30 Data Ascii: urn n.get}while(e=u(e))}})},function(t,n,e){"use strict";var r=e(0),i=e(9),o=e(23),u=e(17),c=e(16).f;e(7)&&r(r.P+e(63),"Object",{__lookupSetter__:function(t){var n,e=i(this),r=o(t,!0);do{if(n=c(e,r))return n.set}while(e=u(e))}})},function(t,n,e){var r=e(0
2023-12-31 23:36:33 UTC	6949	IN	Data Raw: 20 42 6c 6f 62 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 2c 66 6f 72 6d 44 61 74 61 3a 22 46 6f 72 6d 44 61 74 61 22 69 6e 20 6e 2c 61 72 72 61 79 42 75 66 66 65 72 3a 22 41 72 72 61 79 42 75 66 66 65 72 22 69 6e 20 6e 7d 2c 72 3d 5b 22 44 45 4c 45 54 45 22 2c 22 47 45 54 22 2c 22 48 45 41 44 22 2c 22 4f 50 54 49 4f 4e 53 22 2c 22 50 4f 53 54 22 2c 22 50 55 54 22 5d 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 68 28 74 68 69 73 29 7d 2c 6c 2e 63 61 6c 6c 28 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6c 2e 63 61 6c 6c 28 64 2e 70 72 6f 74 6f 74 79 70 65 29 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: Blob,!0}catch(t){return!1}}(),formData:"FormData"in n,arrayBuffer:"ArrayBuffer"in n},r=["DELETE","GET","HEAD","OPTIONS","POST","PUT"];h.prototype.clone=function(){return new h(this)},l.call(h.prototype),l.call(d.prototype),d.prototype.clone=function(){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49840	172.240.127.131	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	686	OUT	GET /match?bidder_id=43554&callback_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbetweendigitalis%2F%24%7BUSER_ID%7D HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	891	IN	HTTP/1.1 302 Found location: /match?bidder_id=43554&callback_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbetweendigitalis%2F%24%7BUSER_ID%7D&crf=1&rts=-3596667896408315238 cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:32 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:32 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZZH7AAAHckAYnS8qPygIxTXPYT0FCDkOZ1ys4A==; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:32 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ss=1; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:32 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49845	35.177.4.157	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	614	OUT	GET /yndx?id=9d4cd41a-f59d-4815-8a89-9d30806f5389 HTTP/1.1 Host: px.arcspire.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:32 UTC	336	IN	HTTP/1.1 307 Temporary Redirect server: envoy date: Sun, 31 Dec 2023 23:36:32 GMT content-length: 0 location: https://an.yandex.ru/mapuid/arcspireis/2f5cae237caa1645c219dd set-cookie: arcid=2f5cae237caa1645c219dd; expires=Tue, 30 Jan 2024 23:36:32 GMT; secure; SameSite=None x-envoy-upstream-service-time: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49839	193.3.184.135	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	645	OUT	GET /rmatch/?dp=151&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F%24%7BUSER_ID%7D HTTP/1.1 Host: acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	647	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 31 Dec 2023 23:36:32 GMT Content-Type: text/html Content-Length: 154 Connection: close Set-Cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Sun, 31-Dec-23 23:46:32 GMT Location: /rmatch/?r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F$%7BUSER_ID%7D&dp=151&tc=1 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Set-Cookie: aid=fwAAAWWR+wBtmTrls7IZAtcVKV0qBQkQfBtss5ZLD1d9Lf94; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
2023-12-31 23:36:33 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49842	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	746	OUT	GET /an/mapuid/adobedmp/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	1247	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:32 GMT Expires: Sun, 31 Dec 2023 23:36:32 GMT Last-Modified: Sun, 31 Dec 2023 23:36:32 GMT Location: https://dpm.demdex.net/ibs:dpid=423652&dpuuid=C2D1B88438B2B5A1 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: yuidss=5002853841704065781; domain=.ru/an; path=/; expires=Wed, 28-Dec-2033 23:36:32 GMT; SameSite=None; Secure Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065792934058-9873309517573511387-balancer-l7leveler-kubr-yp-sas-27-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49843	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	746	OUT	GET /an/mapuid/betweenx/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	1270	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:32 GMT Expires: Sun, 31 Dec 2023 23:36:32 GMT Last-Modified: Sun, 31 Dec 2023 23:36:32 GMT Location: https://ads.betweendigital.com/match?bidder_id=161&external_user_id=86BBE4B77D17937B NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: yuidss=5002853841704065781; domain=.ru/an; path=/; expires=Wed, 28-Dec-2033 23:36:32 GMT; SameSite=None; Secure Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065792937821-10660005068301309128-balancer-l7leveler-kubr-yp-sas-26-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49841	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	749	OUT	GET /an/mapuid/blueseaxcom/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	1279	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:32 GMT Expires: Sun, 31 Dec 2023 23:36:32 GMT Last-Modified: Sun, 31 Dec 2023 23:36:32 GMT Location: https://im.bluevoox.com/pixel?s1=1&s2=1315&s3=vldyrx2shs82pv9o&cm=1&rd=1&puid=1EF296A0880109F7 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: yuidss=5002853841704065781; domain=.ru/an; path=/; expires=Wed, 28-Dec-2033 23:36:32 GMT; SameSite=None; Secure Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065792967964-6846339384565792035-balancer-l7leveler-kubr-yp-sas-49-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49844	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	386	OUT	GET /favicon/xn--80atu9c.xn--p1ai?size=120&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:33 UTC	8074	IN	Data Raw: 31 46 38 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 2c b1 49 44 41 54 78 01 ec 5b 03 9c 24 c9 f2 8e ac e6 78 56 e7 bb ff b3 ed f7 ce 36 9e 6d db b6 6d db b6 8d b3 6d df f2 66 e7 46 cd ea 52 c4 bf 6f eb a2 27 e6 fb 65 f7 9c 1d b3 b9 55 89 42 f7 97 5f 28 b3 1d dd c6 e4 9f a7 6f a8 cc b7 e2 72 a9 e0 b6 13 a1 7b d5 db f1 8e 85 42 f0 70 e7 dc 2e 9d 38 dd a1 1d a5 c3 cc 42 22 42 b4 e5 df 96 f3 bc de 15 de d2 2e 4b 8e 42 44 c2 8b e3 84 f2 be 4a a9 90 0e 57 8a 1b 88 e8 cc 76 27 f9 e7 f8 48 79 ba 5a 2c 9c db ea 24 9b 56 8d 57 c3 a1 4a 29 7e fc ae f7 11 ba 15 cb 6d 02 e0 e3 2e 98 72 b5 66 32 39 df 8a 56 54 4b 85 fd da 71 f6 d8 66 3b b9 57 10 b8 bb a6 19 af 4c 59 0a 44 e2 44 c8 d1 12 90 88 78 cb Data Ascii: 1F82PNGIHDRxx9d6,IDATx[$xV6mmmfFRo'eUB_(or{Bp.8B"B.KBDJWv'HyZ,$VWJ)~m.rf29VTKqf;WLYDDx
2023-12-31 23:36:33 UTC	3439	IN	Data Raw: 44 36 38 0d 0a 24 22 d3 c2 4f 09 8d 04 65 6e 65 d2 7a d4 0e ad 45 54 dd 2b d8 d2 7a ec d3 93 66 e0 84 b3 3c ff e6 2c 0f 86 4e 1d 8c bc f7 20 eb 53 9c 3c 2a b5 50 ae 9e b7 e1 d3 e6 9a eb ac 43 23 0e 3f 16 53 48 8e ef de 1f b4 c8 17 22 3f 3e 66 79 61 c5 f3 ed 19 be e7 26 cf 4a e5 d6 e5 1f 7f bd c4 b5 bc b0 ea 84 ca 86 d0 47 e8 8a f4 90 68 d8 f2 c3 24 37 4d 70 bf b4 de cb 74 39 6b 8b a6 b0 83 85 aa 68 44 2d 9b 8d 1d 9d 04 a4 93 18 36 03 b5 e5 43 f6 e8 b7 f3 bd 97 1d d7 e8 88 07 7e ee 9d 02 14 34 5e 2f ab 6e 3c 49 63 57 8e d6 48 af 8b 9d 3f 27 e6 fb 92 b3 74 22 37 22 ee 0a c0 52 6f 34 ac 0b ce 1c b2 8b 09 28 e6 52 98 fb 0a 82 45 72 38 84 2e 02 16 76 96 8b d3 d4 6a 15 e2 70 3d 73 1e 23 40 f4 8e 44 ba 9c e9 04 fe 34 0b 11 e8 51 8f bc 3e d5 60 0e 82 f8 63 37 64 Data Ascii: D68$"OenezET+zf<,N S<*PC#?SH"?>fya&JGh$7Mpt9khD-6C~4^/n<IcWH?'t"7"Ro4(REr8.vjp=s#@D4Q>`c7d
2023-12-31 23:36:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49847	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	516	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31 Dec 2023 23:36:33 GMT Last-Modified: Sun, 31 Dec 2023 23:36:33 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:33 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49846	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	767	OUT	GET /an/mapuid/google/?partner-tag=yandex_llc HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	1333	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31 Dec 2023 23:36:33 GMT Last-Modified: Sun, 31 Dec 2023 23:36:33 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=yandex_llc&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: yuidss=5002853841704065781; domain=.ru/an; path=/; expires=Wed, 28-Dec-2033 23:36:33 GMT; SameSite=None; Secure Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065793210077-17047913194838428001-balancer-l7leveler-kubr-yp-sas-35-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49848	172.240.127.131	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:32 UTC	829	OUT	GET /match?bidder_id=43554&callback_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbetweendigitalis%2F%24%7BUSER_ID%7D&crf=1&rts=-3596667896408315238 HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dc=was1; tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; ut=ZZH7AAAHckAYnS8qPygIxTXPYT0FCDkOZ1ys4A==; ss=1
2023-12-31 23:36:33 UTC	698	IN	HTTP/1.1 302 Found location: https://an.yandex.ru/mapuid/betweendigitalis/3d81c4af-64fb-5301-a603-3d28c392c628 cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:33 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:33 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZZH7AQACdOhkDppWV27D1fNSGallkc0Mo86RlA==; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:33 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49849	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	623	OUT	GET /get-direct/4667035/YnGXQRupS_9KfdsimUL6_w/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/webp Content-Length: 8056 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Wed, 30 Aug 2023 10:16:30 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 23d4c004dc12814a NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:36:33 UTC	8056	IN	Data Raw: 52 49 46 46 70 1f 00 00 57 45 42 50 56 50 38 20 64 1f 00 00 10 79 00 9d 01 2a 0b 01 96 00 3e 51 22 8e 45 21 a1 0a 8d c6 9a 0c 02 82 53 6f 7d 8a 41 09 d2 9b 67 06 5b a9 d3 5b 22 fd 23 38 3e c6 75 9a 65 bf e4 f8 05 d7 3e 74 7b a5 eb 47 fe af aa df d4 5e c0 1f ad 3e a4 ff 18 3d ec ff 77 ff 85 ea 0f f6 47 fe af f9 9f 7b 0f 43 9f df bd 41 bf 98 ff 80 ff ff ed 61 ff 9b d8 7f d0 03 f6 f7 d3 97 f7 0b e1 1b fb ef fd 4f dc 0f 69 4f fc 5e c0 1f fd b2 65 7d b2 f1 17 f4 1f 71 8f 19 3d c7 b3 1f d6 3f fa 7e 82 7f 2f fc 21 fa cf ef 5e da bf 9a ef bf e4 bf f8 be a0 5f 95 ff 54 ff 61 e2 9b b6 03 60 ff 61 fb 17 ec 05 eb ef d5 bf db fd be fc 38 7d 67 fb 1f c9 9f 75 7e cb 7f cd fc bb fa 00 fe 63 fd 4f fd 47 e6 df c7 7f f3 fc 32 be fb ff 07 d8 0b f9 bf f5 cf f2 bf de 7f 18 7e Data Ascii: RIFFpWEBPVP8 dy*>Q"E!So}Ag[["#8>ue>t{G^>=wG{CAaOiO^e}q=?~/!^_Ta`a8}gu~cOG2~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49850	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	1537	OUT	GET /clmap/95527089?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pointer-click=rn%3A689507476%3Ax%3A42613%3Ay%3A754%3At%3A91%3Ap%3AA%7BAAA%C2%89AA%3AX%3A575%3AY%3A636&browser-info=u%3A1704065783133633243%3Av%3A1201%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Arqnl%3A1%3Ast%3A1704065793&t=gdpr(14%2C14%2C14%2C14%2C14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:33 UTC	463	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31-Dec-2023 23:36:33 GMT Last-Modified: Sun, 31-Dec-2023 23:36:33 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49853	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	1271	OUT	GET /sync_cookie_image_check_secondary HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:33 UTC	525	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Sun, 31 Dec 2023 23:36:33 GMT Location: https://mc.yandex.ru/sync_cookie_image_start_secondary?redirect_domain=mc.yandex.com&token=10234.F6qkHwZSqpvhK8tv6-Q38LI0_hwctZDQL434LjVSvBWxP5XqPCwzUtZjqfHS9vKK.bnI1qX2RSfGi1yq7yPrgNebAogo%2C Set-Cookie: sync_cookie_csrf_secondary=2256605180fake; Expires=Sun, 31-Dec-2023 23:46:33 GMT; Domain=.mc.yandex.com; Path=/ Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2023-12-31 23:36:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49852	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	10862	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=5&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=51537445&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjcyMDU3NjA1NDk5NTkxMDAwCjcyMDU3NjA5NjExOTU3NTY1CjcyMDU3NjA5NDkxOTAzMjQ3CjcyMDU3NjA5NTg2NDIwOTcwCjMwOTk2NDgxODM%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A678%2C%22h%22%3A0%2C%22width%22%3A678%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A129%2C%22top%22%3A1787%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A2%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B3947193092390%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	1241	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065793713067-6870497337942394573-balancer-l7leveler-kubr-yp-vla-99-BAL-230 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json; charset=utf-8 date: Sun, 31 Dec 2023 23:36:33 GMT expires: Sun, 31 Dec 2023 23:36:33 GMT last-modified: Sun, 31 Dec 2023 23:36:33 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache timing-allow-origin: * uniformat: true uniformat-product-type: None x-xss-protection: 1; mode=block
2023-12-31 23:36:33 UTC	661	IN	Data Raw: 32 38 45 0d 0a 7b 22 72 74 62 41 75 63 74 69 6f 6e 49 6e 66 6f 22 3a 7b 22 62 69 64 52 65 71 49 64 22 3a 37 38 33 36 32 36 38 39 34 35 32 38 37 39 39 38 30 30 30 2c 22 62 69 64 52 65 71 49 64 53 74 72 22 3a 22 37 38 33 36 32 36 38 39 34 35 32 38 37 39 39 38 34 31 36 22 2c 22 62 73 47 65 6e 65 72 61 74 65 64 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 64 73 70 49 64 22 3a 31 30 7d 2c 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 22 2c 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 72 65 6c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 22 33 30 22 2c 22 65 78 74 65 72 6e 61 6c 44 53 50 Data Ascii: 28E{"rtbAuctionInfo":{"bidReqId":7836268945287998000,"bidReqIdStr":"7836268945287998416","bsGeneratedUniqID":"5002853841704065781","dspId":10},"common":{"productType":"","pageId":"3797907","deviceType":"6","sspBidId":"","reloadTimeout":"30","externalDSP
2023-12-31 23:36:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49851	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	4367	OUT	POST /an/count/WRCejI_zOoVX2Lb30IqD01FNM1v4emTH1i7aTxpUS8VhTx8wZbvdjwCypYaklQSJ262ha9DbwZesH_SVpFv3Oma3w3XLf4LAJ-ZG_Ho1vuJqEeE3NNRuGj31wy88uCrsUQVRD3Pvs9JjElgS8f50ijP0iYRz905HRsIm-RDHHbP2XCgaa2qsO1klKgbKAYqC087DZY39kQgmHSYe8ZQwZy8I_pKs9cf1v60cW8DumWQkXl5Pd0-jXhrv5kT3gs5RfT4oQR8sDFeoWpb3e-T1fpZd3I1SmWaS09SEGEi3o3O6e6_1OFPcMKWoUD5fxme6xH1PD_I1UEL4V86RukqA65CLsMrBKwPHsPm9b4jIne5IQKMiDxip66JAQ9di10fPJq6dOyGCQ7KTnZi4Naw0CMH53DDDGUI68G3ppPQcdkSslykovkv_8mTUNTTrB6s-u2LD_w8R8wzFIx0AihJHS9xEBfVqZLbxH7OveVoJDzmaRIF480WK_2-RpFesDZzmT0GUrkwBD1x8HWvRv2h-ZTfG2HUlCZMhg8HfBghASjs-oxk_enhrpByFPMh2FSdXHKErG0a0~2=WSSejI_zOoVX2Lal0SqD0BDPOXv0W0y0yPtWrOBmnZZnWU22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsC9vi0-s6a2VJwNEtkstxdpXZjVPNCcK2v96GTAfHMntkpEOD1nFE19aaeGBOqA59sjXx981YZbfKK5K4ThuecMbfQMbfREZgbNZmAqKo-g0hHJBnu5QATUKmLexIYFSufBx-a40jYcNZnolYRoi5VD2SQcShepi8TZ49nyaHnE4cawlDaBu54kCu4vds-O7DZm7O1ioDGEUHRdGwjXRvx5-T1gs4wzU0ImpR0NIQ3BavajJM4h28KmXaphEdY7DcehHam12eQC0KRSR8Fv3e6N4s0CMH73T9TbJMwCbTyNUwgplXzcgcc9yi4utyB_5S0DwtkD6lUlVG4aoyyk2PbbVsP-wQNNT_5vQR2D6v4vUlTrX3kaDzDdlcoJv_tpPDycLuRqun1PjiGW_PT6ZqWia9vBwxfkfKSa5aY__q79BzFW6NBtMj_5v_LPtyNdzRhd4LN4o5aT4wyiceIDBvi00WtyOPKpVzPm-LEdUp9NP4vljWllZ6k7Qd_fo3-SlQQQ6LIhjhA0_ZdbPanE0G00~2=WSeejI_zOoVX2Lao0UKD0ECPOnv0W0y0yPtWrOBmnZZnWU22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsC9YCJux3I1Ff_BdJtRxznvmvsliZaJA9UaZ0EbqefORtPdCEWu7l0aIIM8baO5YixMGraa0vJoqg82gACryKHBIqjBIqjdnzIhHm7QgHTL0Tgf5uy2j5ElgGAqTfJ7ESMbztG20MnJBnuvNnDtLhYGOQXuSxepi8TZ49nyaHnE4cawlDcJWD2Opg1oFjymER3XEm3PaAaTyYpEXrR3tZoByw7Li9rwyGXWcs4laa2N9pDRci9M40fX39dMTV0ERTHMZ9W250mP0uousGRp7G8l9y0OiYA6wIxBcjocdDKNUwgplXzcgcc9yi4Qmc7_Ys5ooVTcG3xojJvLx7wMcSOi-pFpIo-zpENkk_YyDDZ6ZSWSlViwmXtIc-apNxR9y_vvic-JAqFwSOWiMsAG_akZHoGMIC-bTLstqYCI2wJV_nYKHJGVMy38Nkkx-Bm-wxlul5xtFAAA63chO-ALHJyZZqG02mty8PPZ_inr-QdHxCzQKJgzsIOyjQaWglIbATzm_88gPq2jvj22--UKcvCv1G00~2=WSuejI_zOoVX2Lao0GKE06FQP1v0W0y0yPtWrOBmnZZnWU22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsC9f7haEqsWp-ToPy_sEtVUSEUhRCu4oYKfuq2fj2BMczqP33gE1pn9KWcYfL61ehFrK1R90AMyjAW0wcXDFD7IqjBIqjBPCVNgKO1swaLLW7RgnQC0xTHhgW2j7ULnJd7fFPr00DlKYqVErqGU4AQw1AetETqPsCFnXp3pWzTxu8BWv8laS998q-7DdYFAsJlbm_bym-J0Xky0P4EcTiYpE1zQ3NlpBCw7LiDswiKZW6s6lKW2NPxCR6aAMq4eX35aMjV1ExHHMp5Y2b0mP0mmucORp7S8l9m0OyYA6AQxB6joOQ2uVR6dEklxOQQQbYWVVCC5ydzhmhvyhr0NnQ-ju73nPvTwpB8_Cx_qqjjSxhwBpqk3RTo8pD6xhoFS8RsPFlDbcppldoVxDhaof1-7oB8b1kc_D7f4Oe7qN5hNTIiz8h50-lsRVSqAzo0TuxpMT_5vVTPtyNczxdb45J5oLiV4Auj-eYZCCHSC_26MOpuqrwkpJvrE5q6jNAqaY2fhLSh_I7wjc3C8iN9e0VTpob-Od080~2=WT0ejI_zOoVX2Lao0HKE06DQPHv0W0y0yPtWrOBmnZZnWU22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsC9pYhWiDC4-dmkT_PiltFd3NU-okPCe5oICWwKIYjYlTcTmQ3ZUC2J99KWMXeLA3fR3sMH353AIuiAe8xMn1CjBIqjBIsT7LEl7WLefrvK1MYdNZmAq4wzfWhGsb4UvnINtjC91B1DlNZaV4qW-P6X0Xi80Cdfpi0UZZ-4cn-ytWCN12TV98UJH9eERtQRo00QoEFWVBvXSc33Tm2o8LCxv5cS3ws6lNaMvqEhOJlruX70DiDU984kJsQsD8Mj81J263Ajw-0TsgYj6345A1Wo1XXnimtcEmHUJe0nP4KCqrsMDRanOLnVxAdE-dwOgQOboWVZEFhzhm3amkyLWKdarsAWr_rPUf5PzcVcbrvwOvQxx-Bpqc0RDo9pzExh27T8RwRFVDacp_ldoRvDhWpfno6oR8b1-Y-D7f5O83sNrdNTIez8B91-_r4QoK_U94OElTPtyNbzrdVnURtkUKGLCN9MnyGhYtwoyC5p8Gpy8PPZFZJNgxDFdKuNGQrShII8AcjLolz8VgsOCmYnScW1ztFANvYS0W00~2?stat-id=1&test-tag=401871500083345&banner-sizes=eyIyMDYzMTMzMjQxNDAyOTc2MTYiOiIzODF4MTE0IiwiMTkxMDQyMDA2ODE0NzMwNDE2IjoiMzgxeDExNCIsIjE5MjM3MTMwNTk1OTMxNjYzNyI6IjM4MXgxMTQiLCIyMDY1NjkwOTg1MjMwMTMzNjEiOiIzODF4MTE0In0%3D&actual-format=16&pcodever=937691&banner-test-tags=eyIyMDYzMTMzMjQxNDAyOTc2MTYiOiI0Mjk5MjE4OTYxIiwiMTkxMDQyMDA2ODE0NzMwNDE2IjoiNDI5OTIxODk2MiIsIjE5MjM3MTMwNTk1OTMxNjYzNyI6IjQyOTkyMTg5NjMiLCIyMDY1NjkwOTg1MjMwMTMzNjEiOiI0Mjk5MjE4OTY0In0%3D&width=781&height=280&pcode-active-testids=929673%2C0%2C67&subDesignId=10017&confirmTime=-1&confirmRatio=1000000&wmode=0 HTTP/1.1 Host: yandex.ru Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	1286	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31 Dec 2023 23:36:33 GMT Last-Modified: Sun, 31 Dec 2023 23:36:33 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: yuidss=5002853841704065781; domain=.ru/an; path=/; expires=Wed, 28-Dec-2033 23:36:33 GMT; SameSite=None; Secure Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065793722640-5777416961254435094-balancer-l7leveler-kubr-yp-vla-157-BAL
2023-12-31 23:36:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49854	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	416	OUT	GET /get-yabs_performance/5122202/2a00000188a2f2dd6c72992bc3482f2ff4f2/huge HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/jpeg Content-Length: 31092 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sun, 18 Jun 2023 19:45:00 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 7099a268483679bf NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:36:33 UTC	15792	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 01 e8 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 01 02 03 04 05 07 08 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f6 50 00 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"P
2023-12-31 23:36:34 UTC	15300	IN	Data Raw: 6d 53 72 1e d5 52 ab d4 a5 66 a4 9e ac 74 4b e5 04 49 52 3c 8b 84 fa 35 97 2e 9e cf 97 46 7c 9a f0 95 bc a6 fd 0a de 17 e3 c8 be 17 e3 c2 3d 85 e7 13 84 b0 d9 07 93 86 2f f5 1b 81 e1 1f 1b 22 e2 a0 b1 72 11 b0 5d 1b 4f f5 58 2d 93 c1 57 03 33 f3 f4 5c 1b b0 f0 af 2f 20 de 98 95 94 45 34 27 07 b8 ad 45 a5 95 09 f6 1a ca 1d cb 8a 4e 46 57 42 a8 d3 53 5b 0a 4e c1 50 ac 45 86 04 1c dc e2 27 88 70 16 ad 80 8e 96 3f cc 22 88 a5 e8 a4 a9 2e 89 a4 88 2a a9 c5 2a 21 05 aa 5d c5 ab cd e4 d9 7c 33 e8 d7 80 ac e5 13 6c f0 1b e2 af 9c 04 22 d0 1e 31 ec e1 2f 49 88 3b 8f 43 76 45 03 66 a6 58 2c 62 73 c8 e4 c6 d0 7c 6c b8 45 e1 31 72 18 fa 17 b9 9b 5f f5 b6 c9 e3 89 11 8b 9f a1 dc 37 ac fa 35 1d fc c6 a2 75 15 d4 a9 ba 95 b8 e4 2f a6 64 72 09 d4 c2 c8 35 18 eb 7a 94 1d Data Ascii: mSrRftKIR<5.F\|=/"r]OX-W3\/ E4'ENFWBS[NPE'p?".**!]\|3l"1/I;CvEfX,bs\|lE1r_75u/dr5z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49855	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	415	OUT	GET /get-yabs_performance/10070214/picce57669c9a2289934f175395af242b91/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/jpeg Content-Length: 6640 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 09 Jun 2023 18:29:21 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: d246a13a2e3abc70 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:33 UTC	6640	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 bf 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 06 03 05 07 02 01 08 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 01 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ec a0 00 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49858	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	764	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 302 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	302	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 36 38 32 38 36 33 37 31 32 32 38 36 32 34 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 36 38 32 38 36 34 37 34 32 35 31 32 31 36 22 2c 22 49 6d 70 49 44 22 3a 22 33 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836268286371228624","Duid":"1704065783133633243","RtbBidReqID":"7836268286474251216","ImpID":"3","CryptaIDv2":"0"},"Vari
2023-12-31 23:36:33 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31 Dec 2023 23:36:33 GMT Last-Modified: Sun, 31 Dec 2023 23:36:33 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49856	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	1425	OUT	POST /an/rtbcount/1PeVexpm0LC200000000U9nJ_2hrGr1WQwwhuONNBJ6Sp0ToB7_-cfZA00IUC97GBNfBF68dVxPaI6K4YcTUU9qJ1X8l1V5ghmA9LiOG8Da9uWC14yDCHj4G27iXeuCxXBMIKKeQmjhB-4Q8bU4ec7-MaHaeSfKHfFKk8uCC0yDVnbbC30npcK0YIvaQWEorJ3n0pbcc_q3mYac0ToLRmuNN30pHgqxlliRBnl2NYGNa16PM8DdBh0WafpA3DCzbPW9P2oGLmDPkP5vyLQGZMiQ-xIGppDTNmIhlWicVp0vE_117imJafeDi-x-2vR_G3fR_CC1u08bzamNYdG_s3rcKYrYBduNVi7_B0lBK0bREawmUidnWwGki3GqD73TPlqxwNvFT55h-bHMakuEjWMK2szUj3_eR5xtTvZg3xShXu0LiEpTyENvtyPp5PnXNii6CFC3cSOAD-H4RRvgvirM5aN6EgL59dlbBDfZbF-6iYUohpntZVv3xpduMEvkbiRcPfU42TiOLx8mRs9iQ6bXsiFESO1T_m3wfTUwC9v_ctgZzmSwpW6Fg2iOL70Vw63Tmp3BRmS5uYmCZV9zoC30qsFToWdmsbHFawGMS3SmhE1kODd2AdE3aki3fy8AJyGCdumzEnWwkXNu0kJF5M000?pcode-active-testids=929673%2C0%2C67 HTTP/1.1 Host: yandex.ru Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	1162	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31 Dec 2023 23:36:33 GMT Last-Modified: Sun, 31 Dec 2023 23:36:33 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065793824803-15977492222281410479-balancer-l7leveler-kubr-yp-vla-147-BAL
2023-12-31 23:36:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49868	172.240.127.131	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	743	OUT	GET /match?bidder_id=161&external_user_id=86BBE4B77D17937B HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dc=was1; tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; ut=ZZH7AAAHckAYnS8qPygIxTXPYT0FCDkOZ1ys4A==; ss=1
2023-12-31 23:36:33 UTC	628	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:33 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:33 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZZH7AQAKYEAe6_DuSKaEEqWTM2zsgi1TskGIXg==; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:33 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 68 connection: close
2023-12-31 23:36:33 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49859	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	10633	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=3&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=45032506&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjE4NzI1NjIzNzQ5MTUxMjAzOAoyMDcyNzg4ODkyMDcwNTQ3MjYKMTg0NzM1ODU0NzgwNjI0NzI3CjE2OTAxNTIyNDcwODg5NzQxMgoxNjQxMjU5NzE4ODE1OTM3ODU%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A509%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A1%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B2085567069305%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:34 UTC	1297	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065793841911-12872927521533680042-balancer-l7leveler-kubr-yp-vla-99-BAL-9591 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:36:33 GMT expires: Sun, 31 Dec 2023 23:36:33 GMT last-modified: Sun, 31 Dec 2023 23:36:33 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:36:33 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: MediaCreative x-xss-protection: 1; mode=block
2023-12-31 23:36:34 UTC	5193	IN	Data Raw: 31 34 34 31 0d 0a 7b 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 69 73 53 74 61 66 66 22 3a 22 66 61 6c 73 65 22 2c 22 77 68 79 54 68 69 73 41 64 4c 61 6e 64 69 6e 67 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 72 65 61 73 6f 6e 73 2e 79 61 6e 64 65 78 2d 74 65 61 6d 2e 72 75 2f 3f 68 69 74 6c 6f 67 69 64 3d 37 38 33 36 32 36 38 39 37 38 35 37 37 34 30 32 38 33 32 22 2c 22 73 73 70 49 64 22 3a 22 22 2c 22 70 61 67 65 4c 61 6e 67 22 3a 22 31 22 2c 22 64 65 74 61 69 6c 65 64 44 65 76 69 63 65 54 79 70 65 22 3a 33 33 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 6d 65 64 69 61 2d 63 72 65 61 74 69 76 65 22 2c 22 Data Ascii: 1441{"common":{"pageId":"3797907","deviceType":"6","sspBidId":"","isStaff":"false","whyThisAdLandingLink":"https://adreasons.yandex-team.ru/?hitlogid=7836268978577402832","sspId":"","pageLang":"1","detailedDeviceType":33,"productType":"media-creative","
2023-12-31 23:36:34 UTC	2218	IN	Data Raw: 38 41 33 0d 0a 45 55 45 5f 4c 41 5a 59 5f 4c 4f 41 44 5f 41 53 59 4e 43 22 3a 22 63 74 6c 22 2c 22 53 4d 41 52 54 5f 51 55 45 55 45 5f 44 49 4d 45 4e 53 49 4f 4e 5f 4f 42 53 45 52 56 45 52 5f 41 53 59 4e 43 22 3a 22 63 74 6c 22 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 56 49 44 45 4f 5f 49 4e 5f 43 4f 4d 42 4f 5f 4f 4e 5f 49 4e 49 54 22 3a 22 63 74 6c 22 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 52 45 4e 44 45 52 5f 41 44 22 3a 22 63 74 6c 22 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 49 4e 50 41 47 45 5f 52 54 42 5f 52 45 4e 44 45 52 5f 56 49 44 45 4f 22 3a 22 63 74 6c 22 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 52 54 42 5f 4c 4f 41 44 22 3a 22 63 74 6c 22 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 47 52 41 42 22 3a 22 65 78 70 22 2c 22 41 53 59 4e 43 5f Data Ascii: 8A3EUE_LAZY_LOAD_ASYNC":"ctl","SMART_QUEUE_DIMENSION_OBSERVER_ASYNC":"ctl","ASYNC_QUEUE_VIDEO_IN_COMBO_ON_INIT":"ctl","ASYNC_QUEUE_RENDER_AD":"ctl","ASYNC_QUEUE_INPAGE_RTB_RENDER_VIDEO":"ctl","ASYNC_QUEUE_RTB_LOAD":"ctl","ASYNC_QUEUE_GRAB":"exp","ASYNC_
2023-12-31 23:36:34 UTC	5965	IN	Data Raw: 31 37 34 35 0d 0a 52 54 49 53 45 52 5f 55 52 4c 5f 4f 4e 5f 57 45 42 4f 53 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 34 37 30 34 39 22 7d 5d 2c 22 56 41 53 5f 47 45 54 5f 43 55 53 54 4f 4d 5f 56 4d 41 50 5f 54 49 4d 45 4f 55 54 5f 56 41 4c 55 45 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 36 30 30 30 22 2c 22 74 65 73 74 49 64 22 3a 22 38 36 35 33 36 32 22 7d 5d 2c 22 56 41 53 5f 45 43 4f 4d 5f 43 54 41 5f 46 4f 52 5f 53 4d 41 4c 4c 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 45 43 4f 4d 5f 43 54 41 5f 53 4d 41 4c 4c 5f 57 49 54 48 5f 54 45 58 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 Data Ascii: 1745RTISER_URL_ON_WEBOS":[{"value":"TRUE","testId":"847049"}],"VAS_GET_CUSTOM_VMAP_TIMEOUT_VALUE":[{"value":"6000","testId":"865362"}],"VAS_ECOM_CTA_FOR_SMALL":[{"value":"TRUE","testId":"878444"}],"VAS_ECOM_CTA_SMALL_WITH_TEXT":[{"value":"TRUE","testId"
2023-12-31 23:36:34 UTC	2210	IN	Data Raw: 38 39 42 0d 0a 22 3a 22 39 32 39 36 37 33 22 7d 5d 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 52 54 42 5f 4c 4f 41 44 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 63 74 6c 22 2c 22 74 65 73 74 49 64 22 3a 22 39 32 39 36 37 33 22 7d 5d 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 47 52 41 42 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 65 78 70 22 2c 22 74 65 73 74 49 64 22 3a 22 39 32 39 36 37 33 22 7d 5d 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 49 4e 49 54 5f 41 53 59 4e 43 5f 41 44 46 4f 58 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 63 74 6c 22 2c 22 74 65 73 74 49 64 22 3a 22 39 32 39 36 37 33 22 7d 5d 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 52 45 4e 44 45 52 5f 41 44 5f 44 41 54 41 5f 4c 4f 41 44 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 63 74 6c 22 2c 22 74 65 73 74 49 Data Ascii: 89B":"929673"}],"ASYNC_QUEUE_RTB_LOAD":[{"value":"ctl","testId":"929673"}],"ASYNC_QUEUE_GRAB":[{"value":"exp","testId":"929673"}],"ASYNC_QUEUE_INIT_ASYNC_ADFOX":[{"value":"ctl","testId":"929673"}],"ASYNC_QUEUE_RENDER_AD_DATA_LOAD":[{"value":"ctl","testI
2023-12-31 23:36:34 UTC	5973	IN	Data Raw: 31 37 34 44 0d 0a 69 65 6e 74 54 69 6e 22 3a 22 35 38 30 33 31 30 31 35 34 30 35 31 22 2c 22 63 6c 69 65 6e 74 54 79 70 65 22 3a 33 7d 2c 22 61 64 76 65 72 74 49 6e 66 6f 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 64 73 2f 61 64 76 65 72 74 69 73 65 72 5f 69 6e 66 6f 2f 57 44 34 65 6a 49 5f 7a 4f 6f 56 58 32 4c 61 33 30 31 71 36 30 42 46 41 41 32 4f 51 62 4b 67 62 4b 67 61 34 6d 4c 4a 32 30 33 66 45 35 4d 63 48 71 5a 46 41 75 68 65 61 30 69 79 39 77 4e 4b 36 31 73 6b 5a 31 71 64 45 4c 4f 4b 6a 47 61 4f 4c 75 4d 30 55 53 51 48 39 63 77 79 58 41 76 69 70 57 4e 43 4d 4b 33 62 30 67 52 47 59 4c 6a 38 62 31 30 57 43 43 63 4c 44 63 49 6f 6a 77 78 65 55 38 77 50 58 6e 34 46 57 78 6f 37 37 6f 4f 65 4f 66 66 6b 32 6f 30 72 33 30 45 Data Ascii: 174DientTin":"580310154051","clientType":3},"advertInfoUrl":"https://yandex.ru/ads/advertiser_info/WD4ejI_zOoVX2La301q60BFAA2OQbKgbKga4mLJ203fE5McHqZFAuhea0iy9wNK61skZ1qdELOKjGaOLuM0USQH9cwyXAvipWNCMK3b0gRGYLj8b10WCCcLDcIojwxeU8wPXn4FWxo77oOeOffk2o0r30E
2023-12-31 23:36:34 UTC	2202	IN	Data Raw: 38 39 33 0d 0a 39 32 20 6a 65 63 66 34 61 34 37 33 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 38 34 34 65 35 62 62 20 6e 35 34 30 36 38 62 35 65 20 77 31 61 39 64 65 39 39 63 5c 22 3e 3c 64 69 76 20 64 61 74 61 2d 62 6c 6f 63 6b 2d 6e 61 6d 65 3d 5c 22 63 6f 6e 74 61 69 6e 65 72 5c 22 20 64 61 74 61 2d 62 61 63 6b 70 61 63 6b 3d 5c 22 31 39 36 5c 22 20 63 6c 61 73 73 3d 5c 22 6a 35 32 36 30 63 62 63 36 20 62 63 35 61 65 37 64 64 32 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6a 63 34 31 30 31 39 32 20 75 61 65 34 31 38 64 31 39 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 38 34 34 65 35 62 62 20 65 38 31 37 39 64 36 66 61 20 6f 34 35 62 38 62 34 33 38 5c 22 3e 3c 64 69 76 20 64 61 74 61 2d 62 6c 6f 63 6b 2d 6e 61 6d 65 3d 5c 22 63 6f 6e Data Ascii: 89392 jecf4a473\"><div class=\"m844e5bb n54068b5e w1a9de99c\"><div data-block-name=\"container\" data-backpack=\"196\" class=\"j5260cbc6 bc5ae7dd2\"><div class=\"jc410192 uae418d19\"><div class=\"m844e5bb e8179d6fa o45b8b438\"><div data-block-name=\"con
2023-12-31 23:36:34 UTC	5981	IN	Data Raw: 31 37 35 35 0d 0a 5a 46 41 75 68 65 61 30 69 79 39 77 4e 4b 36 31 2d 6c 76 6d 68 68 32 65 59 31 76 7a 43 42 54 55 43 4b 4a 37 58 64 47 53 33 77 56 52 76 58 69 6c 43 6d 44 74 6d 61 52 6b 32 45 45 44 36 64 4a 69 5a 67 42 79 77 37 4c 69 33 56 46 75 64 6e 65 44 4d 6f 44 6a 37 6d 64 51 79 48 43 4e 49 56 68 55 65 73 2d 57 4b 64 4a 34 78 5f 35 39 4c 6b 57 71 37 32 64 4e 5a 6d 32 73 36 38 30 41 73 41 4d 58 49 49 33 35 76 74 73 68 63 33 47 66 64 59 78 30 69 50 4b 48 4e 52 52 30 69 52 45 61 31 46 65 79 67 4a 39 66 41 30 70 6c 48 46 43 35 52 4f 63 44 43 39 43 41 35 44 30 4f 67 55 44 38 4a 53 6a 45 43 39 79 58 79 33 56 47 75 77 4a 35 4a 35 43 44 6d 4d 48 36 75 4f 30 70 33 54 52 63 64 67 55 6f 76 70 51 2d 63 38 46 45 7a 57 46 72 76 5a 53 79 69 34 6f 4b 63 64 5f 49 2d Data Ascii: 1755ZFAuhea0iy9wNK61-lvmhh2eY1vzCBTUCKJ7XdGS3wVRvXilCmDtmaRk2EED6dJiZgByw7Li3VFudneDMoDj7mdQyHCNIVhUes-WKdJ4x_59LkWq72dNZm2s680AsAMXII35vtshc3GfdYx0iPKHNRR0iREa1FeygJ9fA0plHFC5ROcDC9CA5D0OgUD8JSjEC9yXy3VGuwJ5J5CDmMH6uO0p3TRcdgUovpQ-c8FEzWFrvZSyi4oKcd_I-
2023-12-31 23:36:34 UTC	2194	IN	Data Raw: 38 38 42 0d 0a 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 76 63 61 66 33 33 30 63 62 3e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 6e 6f 6e 65 3b 66 6c 65 78 3a 6e 6f 6e 65 7d 2e 79 65 31 31 64 38 31 65 37 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c Data Ascii: 88Bsizing:border-box;box-sizing:border-box;-webkit-box-flex:1;-ms-flex-positive:1;flex-grow:1}.vcaf330cb>div{-webkit-box-flex:0;-ms-flex:none;flex:none}.ye11d81e7{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:stretch;-ms-flex-al
2023-12-31 23:36:34 UTC	5989	IN	Data Raw: 31 37 35 44 0d 0a 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 29 2c 63 6f 6c 6f 72 2d 73 74 6f 70 28 39 30 25 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 29 29 3b 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 39 30 25 29 7d 2e 76 64 31 33 35 39 33 30 63 2e 6b 38 36 35 62 39 35 32 65 2c 2e 76 64 31 33 35 39 33 30 63 20 2e 6a 31 32 66 62 63 34 38 36 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 64 31 33 35 39 33 30 63 20 2e 6a 31 32 66 62 63 34 38 36 7b 2d Data Ascii: 175Deft bottom,from(hsla(0,0%,100%,.6)),color-stop(90%,hsla(0,0%,100%,0)));mask:linear-gradient(180deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 90%)}.vd135930c.k865b952e,.vd135930c .j12fbc486{top:0;right:0;height:100%;overflow:hidden}.vd135930c .j12fbc486{-
2023-12-31 23:36:34 UTC	2186	IN	Data Raw: 38 38 33 0d 0a 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 35 30 25 20 35 30 25 2c 35 30 25 20 31 32 33 2e 34 37 25 2c 23 30 30 66 66 39 34 20 30 2c 23 37 32 30 30 35 39 20 31 30 30 25 29 2c 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 33 32 38 2e 37 32 64 65 67 2c 23 36 36 39 36 30 30 20 30 2c 72 65 64 20 31 30 30 25 29 2c 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 30 30 32 39 66 66 20 30 2c 23 38 66 66 66 30 30 20 31 30 30 25 29 2c 2d 6f 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 31 30 30 25 20 31 30 30 25 2c 31 30 30 25 20 31 36 34 2e 37 32 25 2c 23 36 31 30 30 66 66 20 30 2c 23 30 30 66 66 35 37 20 31 30 30 25 29 2c 2d 6f 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 30 20 30 2c 31 30 Data Ascii: 883radial-gradient(50% 50%,50% 123.47%,#00ff94 0,#720059 100%),-o-linear-gradient(328.72deg,#669600 0,red 100%),-o-linear-gradient(bottom,#0029ff 0,#8fff00 100%),-o-radial-gradient(100% 100%,100% 164.72%,#6100ff 0,#00ff57 100%),-o-radial-gradient(0 0,10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49857	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	2437	OUT	POST /watch/3797907/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065788_d84efc3243d59a09a663716ca77dd204a227e6f1afa39970976fdd6859c79c4f&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003629%3Aet%3A1704065790%3Ac%3A1%3Arn%3A1012150515%3Arqn%3A1%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C568%2C2023%2C821%2C4%2C0%2C%2C6037%2C11%2C%2C%2C%2C12125%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065769390%3Afp%3A7384%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065790&t=mc(p-2-h-1)clc(0-0-0)rqnt(1)lt(158700)aw(1)rcm(1)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%229673481704065783203%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:33 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31-Dec-2023 23:36:33 GMT Last-Modified: Sun, 31-Dec-2023 23:36:33 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49860	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	623	OUT	GET /get-direct/1783913/f9RmxpXOY7GrxYUwn9SCHA/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:34 UTC	566	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/webp Content-Length: 9820 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Thu, 08 Apr 2021 15:48:31 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 77887d94af653ce NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:36:34 UTC	9820	IN	Data Raw: 52 49 46 46 54 26 00 00 57 45 42 50 56 50 38 20 48 26 00 00 b0 86 00 9d 01 2a 0b 01 96 00 3e 51 20 8d 45 23 a1 a1 14 89 ae 7c 38 05 04 b1 80 61 78 00 55 af cb af 9d e7 17 ca be 0e c7 36 fb 9f 35 7c 3f f7 de b5 7f b0 ff 97 f5 a3 e8 d3 fb af ea d3 ce 03 fe 97 ad df f3 5e 98 1d 52 9f d3 ff eb fb 05 7f 14 ff 6b eb 53 eb 19 fe 17 cf 1f 06 2b 98 ff b0 fc 88 f3 b7 cd df ce 74 42 cb 7f 66 da 90 77 57 fd 5f cc ff 89 3f da f8 43 f3 07 fc 9f 50 ef 68 ff b9 f5 06 fa 7e f3 8d df fd 77 fd 8f 51 7f 70 be c7 ff 3b fb d7 ac 77 d5 79 af fc 47 f8 bf 60 2f cd 0f 2b 5f 16 4f bb 7f d5 f6 02 fe 85 fd cb f6 87 d9 6b ff 2f 34 9f 59 7b 07 7f 42 fe ff e9 c1 ec e3 d2 2f f7 5d 9d 29 1a 88 80 64 18 df 2a 14 82 53 2e 55 47 06 b4 04 4a be e1 17 1b 23 e8 80 0d 34 f7 29 7e 26 77 a6 1f 56 Data Ascii: RIFFT&WEBPVP8 H&>Q E#\|8axU65\|?^RkS+tBfwW_?CPh~wQp;wyG`/+_Ok/4Y{B/])dS.UGJ#4)~&wV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49861	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	623	OUT	GET /get-direct/4797691/kHoy_oSb5ZcwSmr86_-79Q/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:34 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/webp Content-Length: 11504 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 18 Dec 2023 10:09:58 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: d0000bec4809f951 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]}
2023-12-31 23:36:34 UTC	11504	IN	Data Raw: 52 49 46 46 e8 2c 00 00 57 45 42 50 56 50 38 20 dc 2c 00 00 b0 a1 00 9d 01 2a 0b 01 96 00 3e 51 22 8d 44 a1 a1 0a cd 4b 42 0c 02 82 58 80 30 db 95 b6 af d7 4f 11 7e 3f f8 5f 49 5e 5b f0 5b e6 7a 8f 5b f1 e0 1f ce f3 08 f7 de f8 3f f0 ff ee 7b 31 fd 15 ff 67 dc 1f fb b7 96 bf ec 07 bf 4f ed df f3 bd 4a ff 43 ff 1d fb 01 ef 33 ff 77 f6 97 de 27 f9 ef 50 cf ef 5f e8 fa da bf 75 3d 8f bf 69 7d 37 bf 75 be 1e 3f ba 7f db f4 d4 d3 20 fa 57 92 2f a1 7d c0 f0 a7 f4 2f b2 7f 5f fe 03 d1 2f fd 7f 0d 9d 67 ff 5f d0 3f e6 bf 8a ff 87 fd f3 da 67 f5 5f f1 7c 41 f8 db fe 5f f7 3f c8 6f 90 8f ca ff a1 ff 8f f4 a7 f9 8f fb 5f e0 ff c5 78 f5 ec 3f e3 ff e2 ff 81 f6 0e f5 d3 e9 7f e9 ff c0 7e ec ff 85 f8 ca fc 2f 34 ff 95 ff 45 ec 05 f9 ad ec 7f fd af 10 2f c8 ff d3 f6 03 Data Ascii: RIFF,WEBPVP8 ,*>Q"DKBX0O~?_I^[[z[?{1gOJC3w'P_u=i}7u? W/}/_/g_?g_\|A_?o_x?~/4E/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49862	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	621	OUT	GET /get-direct/60662/EDT16RXL_Q2jRqVylYA9UA/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:34 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/webp Content-Length: 13092 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 15 Jan 2018 12:39:26 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: a1949d58266a0662 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:36:34 UTC	13092	IN	Data Raw: 52 49 46 46 1c 33 00 00 57 45 42 50 56 50 38 20 10 33 00 00 b0 ac 00 9d 01 2a 0b 01 96 00 3e 51 20 8d 44 23 a2 21 17 1b 1d c4 38 05 04 a0 0c 2f 03 e6 b7 79 51 e7 ff 18 bf 2c 3e 7d 39 27 c4 ef 78 f7 7b f7 3f fc 3f df 46 19 1d 71 fc 3f 35 8e 3b fe d1 fd 6f f5 f7 fa e7 ff ff fb bf 6e 7f 1b 3d f4 fe 84 ff ad ee 05 fd 7b f8 f7 f4 0f c8 2f f0 9f ff ff f8 78 aa f3 13 fc 93 fb 0f f9 9f ec 9f bf ff 26 7f e5 3f bb 7f 87 fd ff f9 e3 e8 01 fa 67 ff 63 b2 2f fb 17 fb 1f 60 5f e6 ff dd 7f f7 fb 33 7f b7 fd c3 f8 3f fd b3 ff d5 ff 0f e0 4b f9 6f f6 2f f9 3f 9f fd c0 1f f8 75 5c f8 a5 f6 3f c6 9f c6 8f 67 7c 97 fb d3 f8 3f dd 3f 64 2c 75 f5 f5 fe d7 a1 1f ce ff 11 7e eb fc 97 ed df e6 ff cb 7f ee fe e2 bd 2d f8 b7 fe 67 f8 af dd 5f f1 1f 21 7f 96 ff 3a ff 11 fd bf f6 df Data Ascii: RIFF3WEBPVP8 3*>Q D#!8/yQ,>}9'x{??Fq?5;on={/x&?gc/`_3?Ko/?u\?g\|??d,u~-g_!:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49871	50.16.134.138	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	609	OUT	GET /ibs:dpid=423652&dpuuid=C2D1B88438B2B5A1 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	761	IN	HTTP/1.1 302 Found Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Length: 0 Connection: close X-TID: 8eSMN5NVQMs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=423652&dpuuid=C2D1B88438B2B5A1 DCS: dcs-prod-va6-2-v053-0f548012f.edge-va6.demdex.com 0 ms set-cookie: demdex=23040168177596022182881359646971805270; Max-Age=15552000; Expires=Fri, 28 Jun 2024 23:36:33 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49863	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	622	OUT	GET /get-direct/5146926/qZYz2rttzhVwcK8Dsm8bag/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:34 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/webp Content-Length: 4190 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Wed, 13 Dec 2023 05:59:05 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: e23e1c2a649655a0 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]}
2023-12-31 23:36:34 UTC	4190	IN	Data Raw: 52 49 46 46 56 10 00 00 57 45 42 50 56 50 38 20 4a 10 00 00 f0 53 00 9d 01 2a b4 00 b4 00 3e 51 22 8e 45 21 a1 09 f5 0a e6 0c 02 82 59 42 24 2e 15 eb 96 e9 4f 7e e1 e4 74 72 2d 99 fe e3 d5 ff e8 cf 60 5e 7c be 67 fc dc 3d 29 6f 37 fa 14 f4 b9 d8 e3 ec 37 f5 2d 8d 8d 67 e6 57 db 0c f0 76 d7 c0 39 fa ee 3f fe 0f a0 9a 75 fe 9f d0 f7 a3 df b0 b8 23 f3 7f 10 66 dd 41 64 e8 eb 56 74 89 98 8a 4f 1e 74 07 0a b8 be 0a 78 9e 1a 5b 6a ad 75 7f fa 2e 56 03 39 6a c6 3c f1 8f b1 b5 d4 9a 71 0e 2e b6 5c 6f e2 37 c1 03 3b 54 0c 43 01 68 a7 20 d0 ea c5 8c 88 07 e1 76 d3 98 6f f1 cd fe 1d e0 f1 53 83 f2 5c ee 29 d0 af 12 e0 36 0a 53 9c 6c 08 14 f6 fe 61 01 3f 3f ad 92 58 b6 9c bf 22 41 39 e1 a3 eb 21 07 05 31 bc c8 f4 73 8d 82 c7 8b d0 69 85 7f c1 41 89 d3 91 57 97 67 3f Data Ascii: RIFFVWEBPVP8 JS*>Q"E!YB$.O~tr-`^\|g=)o77-gWv9?u#fAdVtOtx[ju.V9j<q.\o7;TCh voS\)6Sla??X"A9!1siAWg?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49866	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	764	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 327 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:33 UTC	327	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 36 38 32 38 36 33 37 31 32 32 38 36 32 34 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 36 38 32 38 36 34 37 34 32 35 31 32 31 36 22 2c 22 49 6d 70 49 44 22 3a 22 33 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836268286371228624","Duid":"1704065783133633243","RtbBidReqID":"7836268286474251216","ImpID":"3","CryptaIDv2":"0"},"Vari
2023-12-31 23:36:34 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31 Dec 2023 23:36:33 GMT Last-Modified: Sun, 31 Dec 2023 23:36:33 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49865	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	1937	OUT	POST /an/rtbcount/1LOxrq3k0LC200000000U9nJ_2hrGr1WQwwhuONNBJ6Sp0ToB7_-cfZA00IUC97GBNfBF68dVxPaI6K4YcTUU9qJ1X8l1V5ghmA9LiOG8Da9uWC14yDCHj4G27iXeuCxXBMIKKeQmjhB-4Q8bU4ec7-M4QJfAfYyoyWWmy3mbt4M4mF3N2QGo5Ac1Y1xBHCFa7EMwJyGl68Iu5t9rd3XDGD3zAhJkw_niZ7yPM81EO6P5KZsCYi2oQdC8CrpcPb0rW991R2r6vaNNnNfY9QnRpl93FFrLR3Aks3o9xE34p_4qIm1kUaWs_wlOFalj8FbFmmm7a1YtsI1UEU3_KCMvIBMucVXD-pVie0yjO2LyoIhXomVMFe2QqD30yTDrg-J_jTaDuMMVsK5wUvWQs2PmFPrwuF-naLljxdEOBjoE7W1syuDNuxVNJndyHd6bMmm8m-mUPnWOtx4nfjcxcnLOMISOsfKacV-aWrc-KyuQoBxwdF7-1_alhEVnSvcQMnkPccuW9rn1JlZ1lQcXWQM7Umy9zZ57x1FQfqxuycdkJTgVx3pBE2Oke9n1SU1FiOD7BFCTd0mtkB02D-d70mC3VQzd22VJUK4UNe1PmFp2iu6fWsS8YSukIvmEhpWPFp0oVY3ax63Qw4V0BMHnLO0?confirmTime=2227000&confirmRatio=1000000&test-tag=401871499952130&actual-format=16&rnd=2998861572840&pcode-active-testids=929673%2C0%2C67&banner-sizes=eyIyMDYzMTMzMjQxNDAyOTc2MTYiOiIzODF4MTE0IiwiMTkxMDQyMDA2ODE0NzMwNDE2IjoiMzgxeDExNCIsIjE5MjM3MTMwNTk1OTMxNjYzNyI6IjM4MXgxMTQiLCIyMDY1NjkwOTg1MjMwMTMzNjEiOiIzODF4MTE0IiwiMTg3MjU2MjM3NDkxNTEyMDM4IjoiMzgxeDExNCIsIjIwNzI3ODg4OTIwNzA1NDcyNiI6IjM4MXgxMTQiLCIxODQ3MzU4NTQ3ODA2MjQ3MjciOiIzODF4MTE0IiwiMTY5MDE1MjI0NzA4ODk3NDEyIjoiMzgxeDExNCIsIjE2NDEyNTk3MTg4MTU5Mzc4NSI6IjM4MXgxMTQifQ%3D%3D&width=781&height=280 HTTP/1.1 Host: yandex.ru Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:34 UTC	1161	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:33 GMT Expires: Sun, 31 Dec 2023 23:36:33 GMT Last-Modified: Sun, 31 Dec 2023 23:36:33 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065793971537-8320675541757684077-balancer-l7leveler-kubr-yp-vla-128-BAL
2023-12-31 23:36:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49864	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	646	OUT	GET /get-yabs_performance/10426767/2a00000188a2f2f3429a0ae4264045d573d6/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:34 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: image/webp Content-Length: 5640 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Jun 2023 01:36:51 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 856725e68d6e8093 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:36:34 UTC	5640	IN	Data Raw: 52 49 46 46 00 16 00 00 57 45 42 50 56 50 38 20 f4 15 00 00 70 5a 00 9d 01 2a c8 00 c6 00 3e 51 24 8f 44 a1 a1 0a 8c 72 d0 0c 02 82 59 cf 9c a9 94 d9 89 dd 9e 43 02 9f cf 96 06 a2 59 40 69 f7 80 3f 40 08 6e 16 62 a7 fc 03 38 fc 87 37 6c f7 8b ff 3d 38 ff af de 11 ce ff bb 3d eb 73 d1 81 e9 75 92 e7 e2 8f e8 dd b8 7f 82 f0 67 f4 bd 70 4d 63 e6 1f da 1f e0 fa f5 fe a7 be 5f 95 3a 82 fb 4f fc e7 a6 a7 6f bb 7c 76 2f f3 9f b1 fe c1 1e ca fd 4b fd c7 f6 cf 61 5f be f3 67 f9 4f f2 be c0 1c 35 5f 80 ff 95 ec 1d fc f7 fb c7 ac 77 f9 9f fc ff d5 fa 8a fd 9f fd a7 b0 cf ec 07 eb ef 6c 9f dc ef 65 8f da 2d 1b c0 a9 c3 91 0c 08 82 fb ac 61 9d ec 41 5d fe 45 58 55 f4 82 3e b4 b7 7d d6 bb 79 15 61 57 d2 08 ef b5 7a 43 27 68 dd 22 2d cb 71 ac 2e ec 67 c2 18 b0 9a 17 d8 Data Ascii: RIFFWEBPVP8 pZ*>Q$DrYCY@i?@nb87l=8=sugpMc_:Oo\|v/Ka_gO5_wle-aA]EXU>}yaWzC'h"-q.g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49867	193.3.184.135	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	742	OUT	GET /rmatch/?r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F$%7BUSER_ID%7D&dp=151&tc=1 HTTP/1.1 Host: acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; aid=fwAAAWWR+wBtmTrls7IZAtcVKV0qBQkQfBtss5ZLD1d9Lf94
2023-12-31 23:36:34 UTC	644	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 31 Dec 2023 23:36:33 GMT Content-Type: text/html Content-Length: 154 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Set-Cookie: cSyncDp14v4=1704065793; expires=Tue, 30-Jan-24 23:36:33 GMT; path=/; Secure; SameSite=None; domain=.acint.net Location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fan.yandex.ru%252Fmapuid%252Fsapeis%252F$%257BUSER_ID%257D&dp=14 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2023-12-31 23:36:34 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49873	52.45.175.185	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	641	OUT	GET /pixel?s1=1&s2=1315&s3=vldyrx2shs82pv9o&cm=1&rd=1&puid=1EF296A0880109F7 HTTP/1.1 Host: im.bluevoox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	241	IN	HTTP/1.1 204 No Content Server: openresty Date: Sun, 31 Dec 2023 23:36:33 GMT Connection: close Set-Cookie: GAID=BS.f9fa-a820-4afe-8043; Expires=Tue, 30 Jan 2024 23:36:33; Max-Age=2592000; Domain=bluevoox.com; Path=/; SameSite=Strict

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49869	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	770	OUT	GET /mapuid/arcspireis/2f5cae237caa1645c219dd HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:34 UTC	715	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:34 GMT Expires: Sun, 31 Dec 2023 23:36:34 GMT Last-Modified: Sun, 31 Dec 2023 23:36:34 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Set-Cookie: yuidss=5002853841704065781; domain=.yandex.ru; path=/; expires=Wed, 28-Dec-2033 23:36:34 GMT; SameSite=None; Secure Set-Cookie: yandexuid=5002853841704065781; domain=.yandex.ru; path=/; expires=Wed, 28-Dec-2033 23:36:34 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49870	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	2349	OUT	POST /watch/95527089/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065788_fa54d8960a9d26439f5af1c19556edcaf70a643ffa0b4031d304b9aba8a0ad31&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003629%3Aet%3A1704065789%3Ac%3A1%3Arn%3A1064215716%3Arqn%3A2%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065791&t=gdpr(14%2C14)mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(158700)aw(1)rcm(1)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%229673481704065783203%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:34 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:34 GMT Expires: Sun, 31-Dec-2023 23:36:34 GMT Last-Modified: Sun, 31-Dec-2023 23:36:34 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49874	142.250.113.157	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	694	OUT	GET /pixel?google_nid=yandex_llc&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:33 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 31 Dec 2023 23:36:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-31 23:36:33 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49872	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:33 UTC	790	OUT	GET /mapuid/betweendigitalis/3d81c4af-64fb-5301-a603-3d28c392c628 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:34 UTC	715	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:34 GMT Expires: Sun, 31 Dec 2023 23:36:34 GMT Last-Modified: Sun, 31 Dec 2023 23:36:34 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Set-Cookie: yuidss=5002853841704065781; domain=.yandex.ru; path=/; expires=Wed, 28-Dec-2033 23:36:34 GMT; SameSite=None; Secure Set-Cookie: yandexuid=5002853841704065781; domain=.yandex.ru; path=/; expires=Wed, 28-Dec-2033 23:36:34 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49875	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	516	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:34 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:36:34 GMT Expires: Sun, 31 Dec 2023 23:36:34 GMT Last-Modified: Sun, 31 Dec 2023 23:36:34 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:34 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49881	50.16.134.138	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	686	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=423652&dpuuid=C2D1B88438B2B5A1 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=23040168177596022182881359646971805270
2023-12-31 23:36:34 UTC	889	IN	HTTP/1.1 200 OK Date: Sun, 31 Dec 2023 23:36:34 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: VFtbyQedQJU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v053-0cb211d63.edge-va6.demdex.com 2 ms set-cookie: dpm=23040168177596022182881359646971805270; Max-Age=15552000; Expires=Fri, 28 Jun 2024 23:36:34 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=23040168177596022182881359646971805270; Max-Age=15552000; Expires=Fri, 28 Jun 2024 23:36:34 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2023-12-31 23:36:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49876	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	755	OUT	GET /set/s/rsya-tag-users/data?referrer=https%3A%2F%2Ffaq-kak.ru%2F HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yastatic.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:34 UTC	1374	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://yastatic.net Cache-Control: public,max-age=300 Connection: Close Content-Length: 357 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:34 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065794770055-6615366883473278249-balancer-l7leveler-kubr-yp-sas-47-BAL set-cookie: is_gdpr=0; Path=/; Domain=.yandex.ru; Expires=Tue, 30 Dec 2025 23:36:34 GMT; SameSite=None; Secure set-cookie: is_gdpr_b=CIvnAxDa4gE=; Path=/; Domain=.yandex.ru; Expires=Tue, 30 Dec 2025 23:36:34 GMT; SameSite=None; Secure set-cookie: _yasc=TlQd79rpWdTf/JfHQCa4fZ/WujLxbrTe52iZkS4SS1JfVnndlXLiCwHU9kC62ZYC; domain=.yandex.ru; path=/; expires=Wed, 28 Dec 2033 23:36:34 GMT; secure
2023-12-31 23:36:34 UTC	357	IN	Data Raw: 7b 22 63 6f 75 6e 74 65 72 73 22 3a 5b 7b 22 69 64 22 3a 31 30 31 34 39 32 33 34 32 36 2c 22 6c 61 62 65 6c 22 3a 22 5a 4c 4f 67 43 4d 36 65 6c 47 45 51 6f 6f 48 36 34 77 4d 22 2c 22 74 79 70 65 22 3a 22 61 64 77 6f 72 64 73 22 7d 2c 7b 22 69 64 22 3a 31 30 31 34 39 32 33 34 32 36 2c 22 6c 61 62 65 6c 22 3a 22 75 58 6c 55 43 4c 71 78 70 6d 4d 51 6f 6f 48 36 34 77 4d 22 2c 22 74 79 70 65 22 3a 22 61 64 77 6f 72 64 73 22 7d 5d 2c 22 63 75 73 74 6f 6d 44 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 62 22 3a 22 22 2c 22 62 72 6f 77 73 65 72 22 3a 22 63 68 72 6f 6d 65 22 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 22 22 2c 22 66 72 65 73 68 22 3a 22 30 22 2c 22 66 72 6f 6d 43 61 6e 63 65 6c 22 3a 22 66 61 6c 73 65 22 2c 22 66 72 6f 6d 47 6f 6f 67 6c 65 22 3a 22 66 61 Data Ascii: {"counters":[{"id":1014923426,"label":"ZLOgCM6elGEQooH64wM","type":"adwords"},{"id":1014923426,"label":"uXlUCLqxpmMQooH64wM","type":"adwords"}],"customDimensions":{"b":"","browser":"chrome","extensions":"","fresh":"0","fromCancel":"false","fromGoogle":"fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49887	142.250.114.155	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	559	OUT	GET /pixel?google_nid=yandex_llc&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:34 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 31 Dec 2023 23:36:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-31 23:36:34 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49883	96.46.186.61	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	511	OUT	GET /match?bidder_id=161&external_user_id=86BBE4B77D17937B HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dc=was1; tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; ss=1; ut=ZZH7AQAKYEAe6_DuSKaEEqWTM2zsgi1TskGIXg==
2023-12-31 23:36:34 UTC	628	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate set-cookie: dc=was1; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:34 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=3d81c4af-64fb-5301-a603-3d28c392c628; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:34 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=ZZH7AgAHAPgyCW0X9ZQFhzHYjcD1laaEk2Q94w==; Max-Age=31536000; Expires=Mon, 30 Dec 2024 23:36:34 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 68 connection: close
2023-12-31 23:36:34 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49879	87.250.251.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	931	OUT	GET /sync_cookie_image_start_secondary?redirect_domain=mc.yandex.com&token=10234.F6qkHwZSqpvhK8tv6-Q38LI0_hwctZDQL434LjVSvBWxP5XqPCwzUtZjqfHS9vKK.bnI1qX2RSfGi1yq7yPrgNebAogo%2C HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; sync_cookie_csrf=886343449fake
2023-12-31 23:36:34 UTC	668	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Sun, 31 Dec 2023 23:36:34 GMT Location: https://mc.yandex.com/sync_cookie_image_decide_secondary?token=10234.5_ASplhEEbcdkyBDhF3OwFpDn7cTV2mrqVSoyDYusz0AivqAJsdt9iHVrSUEdCs3ss0ldmKC4fNBomSdUQqdBGN_YwnRjL9_4vCs2kc1yYzanL5K5dGLIbMILcLmRPZMaqHlRBH4eBYfD7kD1X7FTyHBlhXUj3RvlY09EScIWk3ud0KRodgjF04mbZGNgIF_W7dnISJzGX5XPGzbUao8WqbYImzKdFobayIt6QBlXpc%2C.C4F6dvTSgyUtyyqIfo9SDH7P3pg%2C Set-Cookie: sync_cookie_csrf_secondary=85754447fake; Expires=Sun, 31-Dec-2023 23:46:34 GMT; Domain=.mc.yandex.ru; Path=/ Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2023-12-31 23:36:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49877	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	766	OUT	GET /an/mapuid/google/?partner-tag=yandexcom HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:34 UTC	1331	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:34 GMT Expires: Sun, 31 Dec 2023 23:36:34 GMT Last-Modified: Sun, 31 Dec 2023 23:36:34 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=yandexcom&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: yuidss=5002853841704065781; domain=.ru/an; path=/; expires=Wed, 28-Dec-2033 23:36:34 GMT; SameSite=None; Secure Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065794846937-722848851618336449-balancer-l7leveler-kubr-yp-sas-152-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49878	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	1419	OUT	GET /clmap/95527089?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pointer-click=rn%3A689507476%3Ax%3A42613%3Ay%3A754%3At%3A91%3Ap%3AA%7BAAA%C2%89AA%3AX%3A575%3AY%3A636&browser-info=u%3A1704065783133633243%3Av%3A1201%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Arqnl%3A1%3Ast%3A1704065793&t=gdpr(14%2C14%2C14%2C14%2C14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:35 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:34 GMT Expires: Sun, 31-Dec-2023 23:36:34 GMT Last-Modified: Sun, 31-Dec-2023 23:36:34 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49882	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	393	OUT	GET /get-direct/4667035/YnGXQRupS_9KfdsimUL6_w/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:34 GMT Content-Type: image/jpeg Content-Length: 13575 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Wed, 30 Aug 2023 10:16:30 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 8901bd49ec1abd39 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
2023-12-31 23:36:35 UTC	13575	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 96 01 0b 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 00 07 08 ff c4 00 49 10 00 02 01 03 03 02 04 04 02 06 07 04 07 09 00 00 01 02 03 00 04 11 05 12 21 06 31 13 22 41 51 14 61 71 81 07 32 08 23 91 93 a1 d1 Data Ascii: JFIFC!"$"$CI!1"AQaq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49880	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	765	OUT	GET /an/mapuid/google/?partner-tag=yandexru HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:35 UTC	1330	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:34 GMT Expires: Sun, 31 Dec 2023 23:36:34 GMT Last-Modified: Sun, 31 Dec 2023 23:36:34 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=yandexru&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: yuidss=5002853841704065781; domain=.ru/an; path=/; expires=Wed, 28-Dec-2033 23:36:34 GMT; SameSite=None; Secure Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065794900276-9750444040083940731-balancer-l7leveler-kubr-yp-sas-66-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49885	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	10863	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=32&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=40767555&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjcyMDU3NjA1NDk5NTkxMDAwCjcyMDU3NjA5NjExOTU3NTY1CjcyMDU3NjA5NDkxOTAzMjQ3CjcyMDU3NjA5NTg2NDIwOTcwCjMwOTk2NDgxODM%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A288%2C%22h%22%3A0%2C%22width%22%3A288%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A912%2C%22top%22%3A1025%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A3%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B7443048093041%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:35 UTC	1243	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065794927321-17107309395151078688-balancer-l7leveler-kubr-yp-vla-59-BAL-9752 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json; charset=utf-8 date: Sun, 31 Dec 2023 23:36:34 GMT expires: Sun, 31 Dec 2023 23:36:34 GMT last-modified: Sun, 31 Dec 2023 23:36:34 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache timing-allow-origin: * uniformat: true uniformat-product-type: None x-xss-protection: 1; mode=block
2023-12-31 23:36:35 UTC	662	IN	Data Raw: 32 38 46 0d 0a 7b 22 72 74 62 41 75 63 74 69 6f 6e 49 6e 66 6f 22 3a 7b 22 62 69 64 52 65 71 49 64 22 3a 37 38 33 36 32 36 39 32 36 33 34 36 39 34 37 33 30 30 30 2c 22 62 69 64 52 65 71 49 64 53 74 72 22 3a 22 37 38 33 36 32 36 39 32 36 33 34 36 39 34 37 32 37 32 30 22 2c 22 62 73 47 65 6e 65 72 61 74 65 64 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 64 73 70 49 64 22 3a 31 30 7d 2c 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 22 2c 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 72 65 6c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 22 33 30 22 2c 22 65 78 74 65 72 6e 61 6c 44 53 50 Data Ascii: 28F{"rtbAuctionInfo":{"bidReqId":7836269263469473000,"bidReqIdStr":"7836269263469472720","bsGeneratedUniqID":"5002853841704065781","dspId":10},"common":{"productType":"","pageId":"3797907","deviceType":"6","sspBidId":"","reloadTimeout":"30","externalDSP
2023-12-31 23:36:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49884	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	10619	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=5&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=51537445&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjcyMDU3NjA1NDk5NTkxMDAwCjcyMDU3NjA5NjExOTU3NTY1CjcyMDU3NjA5NDkxOTAzMjQ3CjcyMDU3NjA5NTg2NDIwOTcwCjMwOTk2NDgxODM%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A678%2C%22h%22%3A0%2C%22width%22%3A678%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A129%2C%22top%22%3A1787%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A2%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B3947193092390%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:35 UTC	1186	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065794943632-2728300562680170034-balancer-l7leveler-kubr-yp-vla-159-BAL-7873 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json; charset=utf-8 date: Sun, 31 Dec 2023 23:36:35 GMT expires: Sun, 31 Dec 2023 23:36:35 GMT last-modified: Sun, 31 Dec 2023 23:36:35 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache timing-allow-origin: * uniformat: true uniformat-product-type: None x-xss-protection: 1; mode=block
2023-12-31 23:36:35 UTC	661	IN	Data Raw: 32 38 45 0d 0a 7b 22 72 74 62 41 75 63 74 69 6f 6e 49 6e 66 6f 22 3a 7b 22 62 69 64 52 65 71 49 64 22 3a 37 38 33 36 32 36 39 32 36 38 39 37 39 32 31 35 30 30 30 2c 22 62 69 64 52 65 71 49 64 53 74 72 22 3a 22 37 38 33 36 32 36 39 32 36 38 39 37 39 32 31 35 33 31 32 22 2c 22 62 73 47 65 6e 65 72 61 74 65 64 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 64 73 70 49 64 22 3a 31 30 7d 2c 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 22 2c 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 72 65 6c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 22 33 30 22 2c 22 65 78 74 65 72 6e 61 6c 44 53 50 Data Ascii: 28E{"rtbAuctionInfo":{"bidReqId":7836269268979215000,"bidReqIdStr":"7836269268979215312","bsGeneratedUniqID":"5002853841704065781","dspId":10},"common":{"productType":"","pageId":"3797907","deviceType":"6","sspBidId":"","reloadTimeout":"30","externalDSP
2023-12-31 23:36:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49886	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	393	OUT	GET /get-direct/1783913/f9RmxpXOY7GrxYUwn9SCHA/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Type: image/jpeg Content-Length: 11564 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Thu, 08 Apr 2021 15:48:31 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 32a19a9004a16888 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]}
2023-12-31 23:36:35 UTC	11564	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 96 01 0b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 05 06 04 07 00 02 03 08 01 ff c4 00 4b 10 00 02 01 03 02 03 05 05 04 05 09 05 07 05 00 00 01 02 03 00 04 11 05 21 06 12 31 13 22 41 51 91 07 61 71 81 a1 14 32 b1 d1 15 23 Data Ascii: JFIFC!"$"$C"K!1"AQaq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49888	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	393	OUT	GET /get-direct/4797691/kHoy_oSb5ZcwSmr86_-79Q/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Type: image/jpeg Content-Length: 13093 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 18 Dec 2023 10:09:58 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: dfc5fa60d830ab5b NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
2023-12-31 23:36:35 UTC	13093	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 96 01 0b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 00 02 08 01 09 ff c4 00 49 10 00 01 03 03 02 03 05 05 04 06 09 02 04 07 00 00 01 02 03 04 00 05 11 06 21 12 31 41 07 13 22 51 61 14 32 71 81 91 08 42 a1 b1 Data Ascii: JFIFC!"$"$C"I!1A"Qa2qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49889	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	392	OUT	GET /get-direct/5146926/qZYz2rttzhVwcK8Dsm8bag/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Type: image/jpeg Content-Length: 5896 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Wed, 13 Dec 2023 05:59:05 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 8a4726409be67a8b NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:36:35 UTC	5896	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 b4 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 45 10 00 02 01 03 02 03 05 04 07 06 03 05 09 00 00 00 01 02 03 00 04 11 05 21 06 12 31 13 41 51 61 71 07 14 22 32 42 52 81 91 a1 b1 c1 Data Ascii: JFIFC!"$"$C"E!1AQaq"2BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49893	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	416	OUT	GET /get-yabs_performance/10426767/2a00000188a2f2f3429a0ae4264045d573d6/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Type: image/jpeg Content-Length: 7936 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 10 Jun 2023 01:36:51 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: c49268cbc978f5e1 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]} Timing-Allow-Origin: *
2023-12-31 23:36:35 UTC	7936	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 25 00 25 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c6 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ec a0 00 00 00 00 00 00 Data Ascii: JFIF%%C!"$"$C"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49895	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	391	OUT	GET /get-direct/60662/EDT16RXL_Q2jRqVylYA9UA/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Type: image/jpeg Content-Length: 15122 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 15 Jan 2018 13:22:42 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: c1ed9ae1ccd307c4 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]}
2023-12-31 23:36:35 UTC	15122	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 96 01 0b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 05 06 04 07 00 03 08 02 01 09 ff c4 00 43 10 00 01 03 02 05 02 04 04 04 04 02 08 06 03 00 00 01 02 03 04 05 11 00 06 12 21 31 07 41 13 51 61 71 08 14 22 81 32 91 a1 b1 15 Data Ascii: JFIFC!"$"$C"C!1AQaq"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49894	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	1528	OUT	GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=25&viewability-undetermined=0 HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
2023-12-31 23:36:35 UTC	1134	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:35 GMT Expires: Sun, 31 Dec 2023 23:36:35 GMT Last-Modified: Sun, 31 Dec 2023 23:36:35 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065795256039-5115255657190825093-balancer-l7leveler-kubr-yp-vla-56-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49897	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:34 UTC	566	OUT	GET /mapuid/arcspireis/2f5cae237caa1645c219dd HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
2023-12-31 23:36:35 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:35 GMT Expires: Sun, 31 Dec 2023 23:36:35 GMT Last-Modified: Sun, 31 Dec 2023 23:36:35 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49899	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	586	OUT	GET /mapuid/betweendigitalis/3d81c4af-64fb-5301-a603-3d28c392c628 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
2023-12-31 23:36:35 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:35 GMT Expires: Sun, 31 Dec 2023 23:36:35 GMT Last-Modified: Sun, 31 Dec 2023 23:36:35 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49901	52.40.168.59	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	498	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=423652&dpuuid=C2D1B88438B2B5A1 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=23040168177596022182881359646971805270; dpm=23040168177596022182881359646971805270
2023-12-31 23:36:35 UTC	891	IN	HTTP/1.1 200 OK Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: XaOxQ+vRQ+s= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v050-0bb7eb527.edge-usw2.demdex.com 1 ms set-cookie: dpm=23040168177596022182881359646971805270; Max-Age=15552000; Expires=Fri, 28 Jun 2024 23:36:35 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=23040168177596022182881359646971805270; Max-Age=15552000; Expires=Fri, 28 Jun 2024 23:36:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2023-12-31 23:36:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49898	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	773	OUT	GET /an/mapuid/mailweb/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
2023-12-31 23:36:35 UTC	1113	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:35 GMT Expires: Sun, 31 Dec 2023 23:36:35 GMT Last-Modified: Sun, 31 Dec 2023 23:36:35 GMT Location: https://ad.mail.ru/cm.gif?p=155&id=80FEBCAD1084E9B5 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065795465369-12602361859176681053-balancer-l7leveler-kubr-yp-sas-150-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49890	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	608	OUT	GET /favicon/mebelstyle.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:35 UTC	928	IN	Data Raw: 33 39 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 60 49 44 41 54 78 01 bc 96 03 6c 6d 4d 14 85 a7 b6 6d db 36 83 df b6 6d db b6 6d db b6 f9 6c db b6 cd 2f cd 4a 32 4f e5 e9 dd c9 d7 35 b3 ef e9 6c cd 85 71 a5 ad 48 cc 2c 85 8f 6d 9f bb 0b 83 67 22 bf c2 08 db ef 69 6c bb b6 7a 97 c3 71 ff 37 4f 0e 6d 42 43 e0 1b f0 83 37 5c d9 81 bb 54 fd bb 48 3e bc 11 31 7f fa ca 03 77 40 46 d6 6e 0e b6 fe 06 e4 48 d8 0a 8f d1 e5 64 ce 9f eb 92 0e 10 bc 1a b9 1f 8c aa 5f 80 66 92 c4 a9 ae 48 20 04 3e 06 6f d8 01 8f c9 ff 07 7c e0 68 02 54 da 0e f7 d8 3e cd 3d 4d db 0f a9 7e 96 b1 cc a9 04 3c 08 f4 84 aa 2a b2 82 5f ab b9 ef 90 eb 19 a9 a3 09 78 13 e8 4b f4 5a ed bf 55 f0 3a e4 21 78 12 46 c3 50 aa Data Ascii: 399PNGIHDR szz`IDATxlmMm6mml/J2O5lqH,mg"ilzq7OmBC7\TH>1w@FnHd_fH >o\|hT>=M~<*_xKZU:!xFP
2023-12-31 23:36:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49892	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	605	OUT	GET /favicon/tongbao.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:35 UTC	1041	IN	Data Raw: 34 30 41 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 d1 49 44 41 54 78 01 ec d6 43 98 23 8b 1a 06 e0 aa 24 3d 8d 74 da 3d b6 6d 7b 56 d7 b6 ed cd b5 7d 6c db b6 6d db b6 c7 66 33 a9 3a ef a2 16 e3 99 e4 18 df f3 bc f9 53 fe cb 15 06 5b 65 f2 cc f9 a1 32 98 aa 64 d4 5a 16 31 8c 76 de a0 2f 65 89 a5 b4 d2 f4 e0 dd b7 be 6c f9 1e fe 0f 0f c2 f0 b6 07 ef ba 25 0a 76 91 d4 0e c6 ed cd 45 89 ff 06 71 dc a4 9e c8 9e 74 67 1f 8e e7 22 be c6 7c f6 b2 f1 8c fa 3b 4e 09 2b cb 07 cf 79 e1 aa ea 52 1a 08 e9 c9 20 06 32 d9 de f4 57 2b e8 4a 19 bd e8 c7 40 ea 19 c2 18 9a f9 06 dd 83 6c 97 1f c4 55 f1 5e 73 5e bc ba bc d8 06 22 f6 e7 49 fe 43 c4 08 16 51 20 4e ac e0 37 5c 41 6f ea 19 c1 5a fe 1b 77 e4 Data Ascii: 40APNGIHDR szzIDATxC#$=t=m{V}lmf3:S[e2dZ1v/el%vEqtg"\|;N+yR 2W+J@lU^s^"ICQ N7\AoZw
2023-12-31 23:36:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49896	193.3.184.217	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	736	OUT	GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fan.yandex.ru%252Fmapuid%252Fsapeis%252F$%257BUSER_ID%257D&dp=14 HTTP/1.1 Host: ssp-rtb.sape.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	693	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Type: text/html Content-Length: 142 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Location: https://acint.net/rmatch?dp=14&euid=3203420A03FB91657D01596802698676&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F$%7BUSER_ID%7D Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Set-Cookie: sspuid=CkIDMmWR+wNoWQF9doZpAp9sQKrPkLrhuccV1K/DfCuvJP6K; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
2023-12-31 23:36:35 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49891	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	612	OUT	GET /favicon/finexpert.capital?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:35 UTC	1165	IN	Data Raw: 34 38 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 4d 49 44 41 54 78 01 a4 d7 03 74 24 db 16 c6 f1 ff 3e 8d 38 d7 b6 6d db 36 c7 b6 6d db b6 6d db b6 6d db 9e 74 58 b5 df 4a e7 e9 76 2a d3 35 c9 af 51 cb fb 3b 75 2c b8 64 47 be f1 81 18 2d 80 f2 2b c2 ad 38 50 38 81 ea 68 f1 30 5c ae 6f da 85 0b 42 18 1a f3 fa e7 aa da 40 90 f7 70 4f 11 c6 69 9a 36 35 c9 9b f6 67 2b 80 c6 bf 7b 3b a9 c9 1d 10 c9 43 f6 a5 2a da 5a 02 4f b6 16 c6 59 ae 03 68 f4 5b af 82 35 09 b8 0f 72 4e 61 b9 20 05 24 b0 e1 14 21 0c 21 34 e6 8d cf 54 d3 e6 85 2d ee 31 30 af 9f 9f 7e 8d 7d 84 21 f0 21 e8 22 8d 78 e5 d1 1b 06 b0 a3 5f 7d 45 6d 7b ac 88 c4 11 8e cf 27 bc f4 8c f0 d4 23 82 3b 8f e2 f1 2c d4 88 37 1f 77 0a Data Ascii: 486PNGIHDR szzMIDATxt$>8m6mmmtXJv5Q;u,dG-+8P8h0\oB@pOi65g+{;CZOYh[5rNa $!!4T-10~}!!"x_}Em{'#;,7w
2023-12-31 23:36:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49900	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	775	OUT	GET /an/mapuid/minimobww/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781
2023-12-31 23:36:35 UTC	1171	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:35 GMT Expires: Sun, 31 Dec 2023 23:36:35 GMT Last-Modified: Sun, 31 Dec 2023 23:36:35 GMT Location: https://yandex.digital-services.solutions/api/sync?demand=YANV2EU&userid=C84B2F53E2C8FECA&expires=1&usergroup=1 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065795546560-4139922855044987527-balancer-l7leveler-kubr-yp-sas-43-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49907	142.250.113.157	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	693	OUT	GET /pixel?google_nid=yandexcom&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 31 Dec 2023 23:36:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-31 23:36:35 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49908	142.250.113.157	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	692	OUT	GET /pixel?google_nid=yandexru&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:35 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 31 Dec 2023 23:36:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-31 23:36:35 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49904	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	809	OUT	GET /an/mapuid/operacom/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:36 UTC	1123	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:36 GMT Expires: Sun, 31 Dec 2023 23:36:36 GMT Last-Modified: Sun, 31 Dec 2023 23:36:36 GMT Location: https://t.adx.opera.com/sync?vendor=60143&uid=75C38572774F8FE5 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065796130897-9841915528088601447-balancer-l7leveler-kubr-yp-sas-158-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49906	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	1554	OUT	GET /sync_cookie_image_decide_secondary?token=10234.5_ASplhEEbcdkyBDhF3OwFpDn7cTV2mrqVSoyDYusz0AivqAJsdt9iHVrSUEdCs3ss0ldmKC4fNBomSdUQqdBGN_YwnRjL9_4vCs2kc1yYzanL5K5dGLIbMILcLmRPZMaqHlRBH4eBYfD7kD1X7FTyHBlhXUj3RvlY09EScIWk3ud0KRodgjF04mbZGNgIF_W7dnISJzGX5XPGzbUao8WqbYImzKdFobayIt6QBlXpc%2C.C4F6dvTSgyUtyyqIfo9SDH7P3pg%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:36 UTC	198	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:36 GMT Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49903	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	810	OUT	GET /an/mapuid/xapadsssp/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:36 UTC	1132	IN	HTTP/1.1 302 Found Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:36 GMT Expires: Sun, 31 Dec 2023 23:36:36 GMT Last-Modified: Sun, 31 Dec 2023 23:36:36 GMT Location: https://sync.adkernel.com/user-sync?dsp=94&t=image&uid=5E2625F243647E4E NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065796131548-8188579213321481284-balancer-l7leveler-kubr-yp-sas-100-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49911	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	620	OUT	GET /set/s/rsya-tag-users/data?referrer=https%3A%2F%2Ffaq-kak.ru%2F HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:36 UTC	1050	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: public,max-age=300 Connection: Close Content-Length: 362 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:36 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; domain=.yandex.ru; path=/; expires=Wed, 28 Dec 2033 23:36:36 GMT; secure X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065796164346-4595653254855112888-balancer-l7leveler-kubr-yp-vla-86-BAL
2023-12-31 23:36:36 UTC	362	IN	Data Raw: 7b 22 63 6f 75 6e 74 65 72 73 22 3a 5b 7b 22 69 64 22 3a 31 30 31 34 39 32 33 34 32 36 2c 22 6c 61 62 65 6c 22 3a 22 5a 4c 4f 67 43 4d 36 65 6c 47 45 51 6f 6f 48 36 34 77 4d 22 2c 22 74 79 70 65 22 3a 22 61 64 77 6f 72 64 73 22 7d 2c 7b 22 69 64 22 3a 31 30 31 34 39 32 33 34 32 36 2c 22 6c 61 62 65 6c 22 3a 22 75 58 6c 55 43 4c 71 78 70 6d 4d 51 6f 6f 48 36 34 77 4d 22 2c 22 74 79 70 65 22 3a 22 61 64 77 6f 72 64 73 22 7d 5d 2c 22 63 75 73 74 6f 6d 44 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 62 22 3a 22 22 2c 22 62 72 6f 77 73 65 72 22 3a 22 63 68 72 6f 6d 65 22 2c 22 65 78 74 65 6e 73 69 6f 6e 73 22 3a 22 22 2c 22 66 72 65 73 68 22 3a 22 30 22 2c 22 66 72 6f 6d 43 61 6e 63 65 6c 22 3a 22 66 61 6c 73 65 22 2c 22 66 72 6f 6d 47 6f 6f 67 6c 65 22 3a 22 66 61 Data Ascii: {"counters":[{"id":1014923426,"label":"ZLOgCM6elGEQooH64wM","type":"adwords"},{"id":1014923426,"label":"uXlUCLqxpmMQooH64wM","type":"adwords"}],"customDimensions":{"b":"","browser":"chrome","extensions":"","fresh":"0","fromCancel":"false","fromGoogle":"fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49910	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	10924	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=4&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=17713770&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjcyMDU3NjA1NDk5NTkxMDAwCjcyMDU3NjA5NjExOTU3NTY1CjcyMDU3NjA5NDkxOTAzMjQ3CjcyMDU3NjA5NTg2NDIwOTcwCjMwOTk2NDgxODM%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A1447%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A4%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B9168226299511%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:36 UTC	1242	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065796169987-2951311406852488191-balancer-l7leveler-kubr-yp-vla-49-BAL-8572 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json; charset=utf-8 date: Sun, 31 Dec 2023 23:36:36 GMT expires: Sun, 31 Dec 2023 23:36:36 GMT last-modified: Sun, 31 Dec 2023 23:36:36 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache timing-allow-origin: * uniformat: true uniformat-product-type: None x-xss-protection: 1; mode=block
2023-12-31 23:36:36 UTC	661	IN	Data Raw: 32 38 45 0d 0a 7b 22 72 74 62 41 75 63 74 69 6f 6e 49 6e 66 6f 22 3a 7b 22 62 69 64 52 65 71 49 64 22 3a 37 38 33 36 32 36 39 35 39 30 35 35 34 39 33 30 30 30 30 2c 22 62 69 64 52 65 71 49 64 53 74 72 22 3a 22 37 38 33 36 32 36 39 35 39 30 35 35 34 39 33 30 31 32 38 22 2c 22 62 73 47 65 6e 65 72 61 74 65 64 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 64 73 70 49 64 22 3a 31 30 7d 2c 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 22 2c 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 72 65 6c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 22 33 30 22 2c 22 65 78 74 65 72 6e 61 6c 44 53 50 Data Ascii: 28E{"rtbAuctionInfo":{"bidReqId":7836269590554930000,"bidReqIdStr":"7836269590554930128","bsGeneratedUniqID":"5002853841704065781","dspId":10},"common":{"productType":"","pageId":"3797907","deviceType":"6","sspBidId":"","reloadTimeout":"30","externalDSP
2023-12-31 23:36:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49902	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	516	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:36 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:36:36 GMT Expires: Sun, 31 Dec 2023 23:36:36 GMT Last-Modified: Sun, 31 Dec 2023 23:36:36 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:36 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49905	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	10683	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=32&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=40767555&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjcyMDU3NjA1NDk5NTkxMDAwCjcyMDU3NjA5NjExOTU3NTY1CjcyMDU3NjA5NDkxOTAzMjQ3CjcyMDU3NjA5NTg2NDIwOTcwCjMwOTk2NDgxODM%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A288%2C%22h%22%3A0%2C%22width%22%3A288%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A912%2C%22top%22%3A1025%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A3%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B7443048093041%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:36 UTC	1186	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065796134090-11473970870808804816-balancer-l7leveler-kubr-yp-vla-91-BAL-8727 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json; charset=utf-8 date: Sun, 31 Dec 2023 23:36:36 GMT expires: Sun, 31 Dec 2023 23:36:36 GMT last-modified: Sun, 31 Dec 2023 23:36:36 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache timing-allow-origin: * uniformat: true uniformat-product-type: None x-xss-protection: 1; mode=block
2023-12-31 23:36:36 UTC	662	IN	Data Raw: 32 38 46 0d 0a 7b 22 72 74 62 41 75 63 74 69 6f 6e 49 6e 66 6f 22 3a 7b 22 62 69 64 52 65 71 49 64 22 3a 37 38 33 36 32 36 39 35 38 30 38 32 32 35 37 32 30 30 30 2c 22 62 69 64 52 65 71 49 64 53 74 72 22 3a 22 37 38 33 36 32 36 39 35 38 30 38 32 32 35 37 31 39 38 34 22 2c 22 62 73 47 65 6e 65 72 61 74 65 64 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 64 73 70 49 64 22 3a 31 30 7d 2c 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 22 2c 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 72 65 6c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 22 33 30 22 2c 22 65 78 74 65 72 6e 61 6c 44 53 50 Data Ascii: 28F{"rtbAuctionInfo":{"bidReqId":7836269580822572000,"bidReqIdStr":"7836269580822571984","bsGeneratedUniqID":"5002853841704065781","dspId":10},"common":{"productType":"","pageId":"3797907","deviceType":"6","sspBidId":"","reloadTimeout":"30","externalDSP
2023-12-31 23:36:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49909	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:35 UTC	638	OUT	GET /favicon/laboratorija-krasoty-must-have.clients.site?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:36 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:36 UTC	1008	IN	Data Raw: 33 45 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 b0 49 44 41 54 78 01 ec 97 03 8c 2c 49 18 80 bb 9f bd c6 d9 b6 6d 9b d1 8b ce b6 19 9c 6d 3b 38 db 17 9d 6d db f6 0d 1e 76 47 7d df 24 df 24 75 bd d6 f9 4f be 2d fc ac ee ae 9a da e8 3f 2f 71 34 00 d9 77 87 a4 6a 5f 07 f3 c0 5c 50 af 2a 0b 5f c3 57 90 bd fc ee 38 19 d6 02 48 3c 8e 66 45 d8 11 d6 87 05 60 1a 8c d1 a4 04 39 f8 0c 1e 87 bb e0 55 0a 29 0c b9 00 92 2f 49 73 18 ec 00 8d d0 1f f9 15 ee 86 f3 28 e2 dd 41 15 40 e2 51 ae f8 34 58 c4 e9 9c ed 34 28 c0 b5 8e 77 87 71 a1 de f6 43 38 1e ee a2 90 4a 77 79 46 f5 94 dc a0 57 c2 22 26 bb 17 0e 80 6f 35 7b 10 8e 92 07 9d fb 46 9b 7b f5 59 d4 18 bb 1b b3 ef 02 94 9d e0 0c 1f 79 06 4e 84 Data Ascii: 3E9PNGIHDR szzIDATx,Imm;8mvG}$$uO-?/q4wj_\P*_W8H<fE`9U)/Is(A@Q4X4(wqC8JwyFW"&o5{F{YyN
2023-12-31 23:36:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49912	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	378	OUT	GET /favicon/mebelstyle.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:36 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:36 UTC	928	IN	Data Raw: 33 39 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 60 49 44 41 54 78 01 bc 96 03 6c 6d 4d 14 85 a7 b6 6d db 36 83 df b6 6d db b6 6d db b6 f9 6c db b6 cd 2f cd 4a 32 4f e5 e9 dd c9 d7 35 b3 ef e9 6c cd 85 71 a5 ad 48 cc 2c 85 8f 6d 9f bb 0b 83 67 22 bf c2 08 db ef 69 6c bb b6 7a 97 c3 71 ff 37 4f 0e 6d 42 43 e0 1b f0 83 37 5c d9 81 bb 54 fd bb 48 3e bc 11 31 7f fa ca 03 77 40 46 d6 6e 0e b6 fe 06 e4 48 d8 0a 8f d1 e5 64 ce 9f eb 92 0e 10 bc 1a b9 1f 8c aa 5f 80 66 92 c4 a9 ae 48 20 04 3e 06 6f d8 01 8f c9 ff 07 7c e0 68 02 54 da 0e f7 d8 3e cd 3d 4d db 0f a9 7e 96 b1 cc a9 04 3c 08 f4 84 aa 2a b2 82 5f ab b9 ef 90 eb 19 a9 a3 09 78 13 e8 4b f4 5a ed bf 55 f0 3a e4 21 78 12 46 c3 50 aa Data Ascii: 399PNGIHDR szz`IDATxlmMm6mml/J2O5lqH,mg"ilzq7OmBC7\TH>1w@FnHd_fH >o\|hT>=M~<*_xKZU:!xFP
2023-12-31 23:36:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49921	142.250.114.155	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	558	OUT	GET /pixel?google_nid=yandexcom&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:36 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 31 Dec 2023 23:36:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-31 23:36:36 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49924	142.250.114.155	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	557	OUT	GET /pixel?google_nid=yandexru&google_hm=7A54631993CF50CC&google_redir=https%3A%2F%2Fan.yandex.ru%2Fresource%2Fspacer.gif HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:36 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 31 Dec 2023 23:36:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-12-31 23:36:36 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49928	34.111.129.221	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	659	OUT	GET /cr?key=yandex&url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fdmpweborama%2F{WEBO_CID} HTTP/1.1 Host: cr.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:36 UTC	796	IN	HTTP/1.1 307 Temporary Redirect Server: Weborama Collect Frontend Date: Sun, 31 Dec 2023 23:36:35 GMT Content-Length: 0 Location: https://cr.frontend.weborama.fr/cr?key=yandex&url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fdmpweborama%2F%7BWEBO_CID%7D&bounce=1&random=213360216 Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Sun, 31 Dec 2023 23:36:36 GMT Set-Cookie: AFFICHE_W=AAxqB4dAAwIA84; expires=Mon, 27 Jan 2025 23:36:36 GMT; domain=.weborama.fr; path=/; secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49914	194.226.130.226	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	577	OUT	GET /yacm HTTP/1.1 Host: cm.tns-counter.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	611	IN	HTTP/1.1 302 Moved Temporarily Server: ms-counter-4.4.3/1.22.1 Date: Sun, 31 Dec 2023 23:36:36 GMT Content-Type: text/html Content-Length: 0 Connection: close Set-Cookie: guid=2C6D6E0F6591FB04X1704065796; domain=tns-counter.ru; path=/; Max-Age=31536000; SameSite=None; Secure Location: https://an.yandex.ru/mapuid/mediascope/a25f35e32967d40c7ae0771106d89ad4ab87cb48a590cf065de50fb836997afa Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49916	193.3.184.135	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	797	OUT	GET /rmatch?dp=14&euid=3203420A03FB91657D01596802698676&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F$%7BUSER_ID%7D HTTP/1.1 Host: acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; aid=fwAAAWWR+wBtmTrls7IZAtcVKV0qBQkQfBtss5ZLD1d9Lf94; cSyncDp14v4=1704065793
2023-12-31 23:36:37 UTC	399	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Sun, 31 Dec 2023 23:36:36 GMT Content-Type: text/html Content-Length: 154 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Location: https://an.yandex.ru/mapuid/sapeis/0100007F00FB9165E53A996D0219B2B3 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2023-12-31 23:36:37 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49917	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	1492	OUT	POST /an/rtbcount/1PkRdN_r0Kq200000000U9nJ_2hrGr1WQwwhuONNNtxNi1p8iVp_Qs8g0n1umaH2ZwMVPecT_DcI8PKHA9vvuVM5ho3nKcOWh_Oga6Xb306IdI1P861YcCcePWvXBsHaq8MmLZBA2K9OUnaP-RaPZeBvPnb1Xbnb16czoyWWmy3mbt4M4mF3N2QGo5Ac1Y1xBHCFa7EMwJyGl68IUBkn-_Q5rmmCNsTexBd6oyRmbua5v0HcLY3Powm89ASoWpJFPMO2MGia5S3MRcHUV5Ma8rh6lkqaCypNLy4gxuB9dymEJlmGHxDioWa3UsO5omts3IoCErZO3h3yXm762ootlvv_S_5cysNncomGFtsmVyYYNCHQ_2pyXlrR5f3F5h1odcJraEK3Izza_JhfVqrsKsZvLrQG4Hri3ImJsBvkVT3VkEZjDjSPR1yFR65SmBPpmvVZTnVFMNo6SIKRpBG3R0ads5WUiV6ccJjRkLGbEfePbUIPlsI3sViJpfh8llhSCVu7kU_iPx6pMHgRcraQBc1dNC7Ek86zgQ61PGSxpmbsyGViarhdpdZoQUwDsX_iF0iubkMju6Y8si0nJsa71-Cj3epGVSh1mD1Wtyi9yj9KJf1l5t0sCA_WdCsqWLFa12Vh1Kx65voC7pWPVt0o0W0fQi9L?pcode-active-testids=929673%2C0%2C67 HTTP/1.1 Host: yandex.ru Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:37 UTC	1160	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:37 GMT Expires: Sun, 31 Dec 2023 23:36:37 GMT Last-Modified: Sun, 31 Dec 2023 23:36:37 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065797005202-8585293958621049067-balancer-l7leveler-kubr-yp-vla-58-BAL
2023-12-31 23:36:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49919	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	812	OUT	GET /an/mapuid/yeahmobissp/ HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:37 UTC	1088	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 690 Content-Type: text/html; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:37 GMT Expires: Sun, 31 Dec 2023 23:36:37 GMT Last-Modified: Sun, 31 Dec 2023 23:36:37 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065797035293-14689628449699035471-balancer-l7leveler-kubr-yp-sas-43-BAL
2023-12-31 23:36:37 UTC	690	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 4d 45 54 41 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 72 65 66 72 65 73 68 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 30 3b 55 52 4c 3d 27 68 74 74 70 73 3a 5c 2f 5c 2f 67 77 2d 69 61 64 2d 62 69 64 2e 79 6d 6d 6f 62 69 2e 63 6f 6d 5c 2f 64 73 70 5c 2f 75 73 65 72 5c 2f 73 79 6e 63 3f 64 73 70 69 64 3d 65 57 46 75 5a 47 56 34 58 32 52 7a 63 41 3d 3d 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 24 26 63 61 6c 6c 62 61 63 6b 3d 24 7b 63 61 6c 6c 62 61 63 6b 7d 27 5c 22 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e Data Ascii: <html><head><noscript><META http-equiv=\"refresh\" content=\"0;URL='https:\/\/gw-iad-bid.ymmobi.com\/dsp\/user\/sync?dspid=eWFuZGV4X2RzcA==&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy=$&callback=${callback}'\"></noscript></head><body><script>(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49918	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	4995	OUT	POST /an/count/WRyejI_zOoVX2LbH0OqD0FFNMnv4emTH1i7aTxpUS8VhTx8wZbvdjwCypYaklQSJ262ha9DbwZesH_SVpFv3Oma3w3XLf4LApsWF5GSAdXFIwmmEbjdX2q87hsy3PxdPBkzqcyOc3vkoNKUVKoGIIDOQIDQadoGWweqCDdysoiXAY52P5BB51cpZLIgLIgM50I2msH4aELSLjWWPLSH6zr5Ouh_6naGjY1pC170GJzZ0rJ0-Y_EXrR0tp-9yQ3LiVGsvIgDbqcHjQFHb1dE6Hi-3Jd7E6q2uX1Cu02uTWDO7a6qCGD-2mUpDif1ayABJtXKCsY4oKzMIGYPEn1UuATwkW35LaTssD6KQbSsPmBa3jbkKIYjYA59hLp38b3LbiXCeP3q5dTPr7HiZfc7CD8oO0QskmtY7mCmSMyHMn33T54Hk608mtsnfwdbkyxiiQ-x-DtBWrNLTnzBc2rxIz2-wCVBwj0Ih84iR3RUaiyibVMFM7f7d2vGVwxHWGvwC9CmK_2-R3FiQhMdW80cqh1uNUK3AUW9RH7iy7pMX7YXUScukHWs-cL4FDtVxVkzUpcj8Dl_UUcSJ_gI55mtLGZG0~2=WQSejI_zOoVX2Lac0SqC05DNMKqGO1eGtm6oua1u0uYo0mJNHADI2OB9TrdnOhO_DdB1sccisIdJN3lafRupXZwVovqzs-_S-QwldQ-oEHCuTy1sYr9fHGn5QkqA1Xr7JvYcfE-BBwvhfhEjjb4nspw6UQkqT7PClNeKe9rwKHMWdNhnA40xzPegG6j7UPnJN7fF9n30DlNYaVCrSMP5qgi3tCdfMg25rRsM86LHJhX0GdhTx6zJ8GD2W89pTOIAYAo-j2siipWVMWrxyopEXrR3TWEJfYT-YqksGA7XJhru1B35i1T9eCkJcIrDOUifw30JoankOmovgMFlcFIek24mCySMiHKnJ7TPrkGoirM-sF_fGFB3pJWWWnzCuGdO_r9u0lQz2Un0_De3dCP-Thc5MVPdvfTUUcLeS8mVcTvz7U4MbZSlkRxijrvxN4_sEvkJxiSwT6YFWVwB0TjuIfJVqhgkDs4RJ_5whM-w4WoYqo7gUYY050_y4F0h_u-WXkrVvMWls3PPp0wskIRkrw0P4ZKrPorSaHWuoFS1Xu2xBXWufVG65m40~2=WPyejI_zOoVX2LaO0OqC0ECMM4qGO1eGtm6oua1u0uYo0mGN19FlikB5R7ziv8ArqrYpKwQvTiXBVMSCVJwNEtkstxdpNLyxNsLp9d3kWEqMfTAA68hKsXKCEeucdcXfQMbfQUdic7hrA40xzQ8gG3lrub60TkerLO3MZl8ufxZqdauWW6tgnIFdQu9yG0qKU4y6Sxf5UuYAFho3IXzU5v9kxcRlK48G8278r7w6Z4_9iPQjrrcS3ws6lNaMvqEhOKjFrPHdc3GzyLjSiWKA3NVgnIE0RGQm8WbqUJApdQ53_153RWw1cJcsYAs8ORhBiYQNMJNunJPCMduOYAt71rEmqlQ_5AoqVMy2VZs-5W4eBp-xv3BB_ipyqailSxdVU0cdqRkl8znwURDVz6LVH6fAcYVxkwtJdHyR41d6AEQ_IavvW95-I-kw_kYK1nZfjVvDSGhGYyyw8DUrPdTcrGE9rpqKaIsJ86-AX5OqXvsGsIKF_8MFO_xKTNbOHoy8a5X9Nv2oEjWZo10uDHqCBkhRSWekYxUKRPVzEIMMOqu1~2=WP8ejI_zOoVX2LaI0IKC04CMLKqGO1eGtm6oua1u0uYo0mGN19FlikB5R7ziv8ArqrYpKwQvTiXBVMSCVJwNEtkstxdpXZjVPNCcSEw0xHQbqeeOYjJQ5GmwZYQUQ6bfQMbfwUoOUlKeG3lreYf0E_NYKO1swZLLWDQEyZYdkFIUJY20RUh58-Thucp5O0X4OLavNQ8gYsKALnmuukHdRopyJ3FSaQKzY_EXrR0tp-9yQ3LiwQcQihToSdAaHko0hkjwZRw1ITCJlyKbMw3GSATUF0BOPl0MIQ3BavajJM5hOSTRbHXo4-Ox16Rcs2As8eRfBikQNAOSao_sNQn8_J1CuBZjWsK8j_ol3E6MxntnG-vhwpilFxlamIpxC_DBBxtDvIv3Wt6ihlpHkwyZpD9wyzBhopuky0lcoHwivoJinmQKmrLx_fjafOFFoszfNTUrMEdWy_9Qx-PjugNiivxEi2IYGbKE_0IEO_x0TNdJQBx6lBGfjc_4DgFnr7KgNAZd640JKEB3yrIQTWqKfpGMwo80~2=WQaejI_zOoVX2Lae0TqC02DNMKqGO1eGtm6oua1u0uYo0mGN19FlikB5R7ziv8ArqrYpKwQvTiXBVMUS8WGGb3jDeC_dScVFzZjtlkjhvwjipWJE7R3TebHQ4KEHMhk2GSVHn1CjBIqjBIsT7LEl7WLefrvK1MYdNZmAq4wzfWhGsb4UvnINtjC91B1DlNZaV4qKUIlgeAEG9gTBmPD3kWzXvWUlvnPwuFeaNN25V56wclIRVJj50p370ns-x74Y8BSu5PejdiNvq6hOcsTnFhGQjlHKJNc6ITCJlyKbMw3GSATUF0BOOjYB9D3boSoMfh1jwjWx9ZqRDmHcvjWYjYA6wIxBcbpQok8Ncs23-s7VvQpA1yFC9VbVcBaatpi0czxNuW39yhCVoopJIs_CSfUXmHoGA9RHEuSiP35ww-iApHQzUPdeovxhqKYY9tiWG_0Y_TY0BMOfN_zDMjGQ0kYtjAxhMXQrXW1whNyhugKLf0-0Dc1b50_yYvDZ_lFNMhzTjSX-P6rzi4YGAF1gEXXUgBKC152A04rC2Jmt6su0HNSToEAKtaei1000~2=WOSejI_zOoVX2LaB0SqB09ELKaqGO1eGtm6oua1u0uYo0mJNHADI2OB9TrdnOhO_DdB1sccisIdJN3lafRupXZwVovqzs-_SUSEThx8v4pXtm7QBKcb534LgxGe67KT_HPXeHQPdnHfrjZvyX4VPz-n4vOUMpWuxokESuj9xEe40jgaNZvnlaqaEy4FuV_1w3rolDNxRQXMREF7Ux37VF1vVBZhifVLLKDHRic7hwmZrocTnFixYV6nWqlJ4Rt795YWqtAaNZm2sj3wLG9SdCriPhvLm3Bav16Rcs2As8eRfBikQt2KatnTJy6f_-00gNZwOGZVjVobqqxxt02LdNsj0axkVfIUPPNzcVkcbby9ors3eH4lllevGh-pDp2nVbZd4k_Fa2bWkN3_6CEMmoAF_sgZzOBBxxOOf7LX6h_KG5YJYvxDVYfgM8LxtU4pwV1X6gc4JQPcx6Gc00W_y4F0G_u-WFEeFp3cvUZ_0XzPJoCGlkEw-B4zWJgPQCimJq8xzEMLy4au1~2?stat-id=3&test-tag=401871499952209&banner-sizes=eyIzMDk5NjQ4MTgzIjoiMTUyeDI4MCIsIjcyMDU3NjA1NDk5NTkxMDAwIjoiMTUyeDI4MCIsIjcyMDU3NjA5NjExOTU3NTY1IjoiMTUyeDI4MCIsIjcyMDU3NjA5NDkxOTAzMjQ3IjoiMTUyeDI4MCIsIjcyMDU3NjA5NTg2NDIwOTcwIjoiMTUyeDI4MCJ9&actual-format=14&pcodever=937691&banner-test-tags=eyIzMDk5NjQ4MTgzIjoiMjgxNDc1MjQ1NDAwMTE3IiwiNzIwNTc2MDU0OTk1OTEwMDAiOiIyODE0NzUyNDU0MDAwODEiLCI3MjA1NzYwOTYxMTk1NzU2NSI6IjI4MTQ3NTI0NTQwMDA4MiIsIjcyMDU3NjA5NDkxOTAzMjQ3IjoiMjgxNDc0OTc2NzY4MDE5IiwiNzIwNTc2MDk1ODY0MjA5NzAiOiIyODE0NzUyNDk1Mjg4NTIifQ%3D%3D&constructor-rendered-assets=eyIzMDk5NjQ4MTgzIjoyMDEsIjcyMDU3NjA1NDk5NTkxMDAwIjoyMDEsIjcyMDU3NjA5NjExOTU3NTY1IjoyMDEsIjcyMDU3NjA5NDkxOTAzMjQ3IjoyMDEsIjcyMDU3NjA5NTg2NDIwOTcwIjo2NTczN30&width=781&height=280&pcode-active-testids=929673%2C0%2C67&confirmTime=2104000&confirmRatio=370000&wmode=0 HTTP/1.1 Host: yandex.ru Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:37 UTC	1160	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:37 GMT Expires: Sun, 31 Dec 2023 23:36:37 GMT Last-Modified: Sun, 31 Dec 2023 23:36:37 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065797036327-950692592142623967-balancer-l7leveler-kubr-yp-vla-136-BAL
2023-12-31 23:36:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49920	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	1320	OUT	GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=25&viewability-undetermined=0 HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:37 UTC	1047	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:37 GMT Expires: Sun, 31 Dec 2023 23:36:37 GMT Last-Modified: Sun, 31 Dec 2023 23:36:37 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065797053041-10968366851142325445-balancer-l7leveler-kubr-yp-vla-101-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49929	144.126.246.116	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	658	OUT	GET /api/sync?demand=YANV2EU&userid=C84B2F53E2C8FECA&expires=1&usergroup=1 HTTP/1.1 Host: yandex.digital-services.solutions Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	293	IN	HTTP/1.1 302 Found x-powered-by: Express location: https://x.bidswitch.net/sync?dsp_id=469&user_id=C84B2F53E2C8FECA&expires=1&user_group=1 vary: Accept, Accept-Encoding content-type: text/plain; charset=utf-8 content-length: 109 date: Sun, 31 Dec 2023 23:36:37 GMT connection: close
2023-12-31 23:36:37 UTC	109	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 34 36 39 26 75 73 65 72 5f 69 64 3d 43 38 34 42 32 46 35 33 45 32 43 38 46 45 43 41 26 65 78 70 69 72 65 73 3d 31 26 75 73 65 72 5f 67 72 6f 75 70 3d 31 Data Ascii: Found. Redirecting to https://x.bidswitch.net/sync?dsp_id=469&user_id=C84B2F53E2C8FECA&expires=1&user_group=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49932	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	516	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781
2023-12-31 23:36:37 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:36:37 GMT Expires: Sun, 31 Dec 2023 23:36:37 GMT Last-Modified: Sun, 31 Dec 2023 23:36:37 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:37 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49931	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	1400	OUT	GET /sync_cookie_image_decide_secondary?token=10234.5_ASplhEEbcdkyBDhF3OwFpDn7cTV2mrqVSoyDYusz0AivqAJsdt9iHVrSUEdCs3ss0ldmKC4fNBomSdUQqdBGN_YwnRjL9_4vCs2kc1yYzanL5K5dGLIbMILcLmRPZMaqHlRBH4eBYfD7kD1X7FTyHBlhXUj3RvlY09EScIWk3ud0KRodgjF04mbZGNgIF_W7dnISJzGX5XPGzbUao8WqbYImzKdFobayIt6QBlXpc%2C.C4F6dvTSgyUtyyqIfo9SDH7P3pg%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:37 UTC	198	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:37 GMT Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49922	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	382	OUT	GET /favicon/finexpert.capital?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:37 UTC	1165	IN	Data Raw: 34 38 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 4d 49 44 41 54 78 01 a4 d7 03 74 24 db 16 c6 f1 ff 3e 8d 38 d7 b6 6d db 36 c7 b6 6d db b6 6d db b6 6d db 9e 74 58 b5 df 4a e7 e9 76 2a d3 35 c9 af 51 cb fb 3b 75 2c b8 64 47 be f1 81 18 2d 80 f2 2b c2 ad 38 50 38 81 ea 68 f1 30 5c ae 6f da 85 0b 42 18 1a f3 fa e7 aa da 40 90 f7 70 4f 11 c6 69 9a 36 35 c9 9b f6 67 2b 80 c6 bf 7b 3b a9 c9 1d 10 c9 43 f6 a5 2a da 5a 02 4f b6 16 c6 59 ae 03 68 f4 5b af 82 35 09 b8 0f 72 4e 61 b9 20 05 24 b0 e1 14 21 0c 21 34 e6 8d cf 54 d3 e6 85 2d ee 31 30 af 9f 9f 7e 8d 7d 84 21 f0 21 e8 22 8d 78 e5 d1 1b 06 b0 a3 5f 7d 45 6d 7b ac 88 c4 11 8e cf 27 bc f4 8c f0 d4 23 82 3b 8f e2 f1 2c d4 88 37 1f 77 0a Data Ascii: 486PNGIHDR szzMIDATxt$>8m6mmmtXJv5Q;u,dG-+8P8h0\oB@pOi65g+{;CZOYh[5rNa $!!4T-10~}!!"x_}Em{'#;,7w
2023-12-31 23:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49915	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	619	OUT	GET /favicon/xn----7sbzoqcfi.xn--p1ai?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:37 UTC	1775	IN	Data Raw: 36 45 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 06 af 49 44 41 54 78 01 dc 94 03 98 64 d7 12 c7 7f 55 b7 31 88 6d db 4e 66 36 ef c5 98 bc 38 e9 69 ed 4c ac b5 62 db b6 6d db b6 b5 88 cd b5 d5 7d ab de bd fb f5 cc 37 7e e6 ef ba be 53 75 fe 55 a7 ee e1 ff 82 0d 9f da 61 f1 cd 1e fb d3 e3 d1 75 24 7e a2 f2 ef 64 93 47 76 da 79 93 87 1a 46 6f 74 ff 0e e3 37 79 78 c7 70 e3 07 77 78 be ee d1 9d 97 e4 af 44 f8 3b a9 bb a7 ae ba 14 cc 77 8e bb f7 75 e1 79 71 f9 4a 84 c9 88 37 59 89 94 04 72 e0 fb 7b 3f f9 d0 bf 44 c0 3a 77 6d bf 96 aa dc e9 b0 92 1a d7 a1 b6 29 e8 c6 e0 e6 c6 2d a8 2e 2e f8 0e 86 5d 95 98 90 1e fa fe 21 8f 4d ff 67 09 90 b5 ef dc a1 8f b8 9f e7 f8 37 8a 3c e5 d8 41 22 c1 dc Data Ascii: 6E8PNGIHDR szzIDATxdU1mNf68iLbm}7~SuUau$~dGvyFot7yxpwxD;wuyqJ7Yr{?D:wm)-..]!Mg7<A"
2023-12-31 23:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49923	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	375	OUT	GET /favicon/tongbao.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:37 UTC	1041	IN	Data Raw: 34 30 41 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 d1 49 44 41 54 78 01 ec d6 43 98 23 8b 1a 06 e0 aa 24 3d 8d 74 da 3d b6 6d 7b 56 d7 b6 ed cd b5 7d 6c db b6 6d db b6 c7 66 33 a9 3a ef a2 16 e3 99 e4 18 df f3 bc f9 53 fe cb 15 06 5b 65 f2 cc f9 a1 32 98 aa 64 d4 5a 16 31 8c 76 de a0 2f 65 89 a5 b4 d2 f4 e0 dd b7 be 6c f9 1e fe 0f 0f c2 f0 b6 07 ef ba 25 0a 76 91 d4 0e c6 ed cd 45 89 ff 06 71 dc a4 9e c8 9e 74 67 1f 8e e7 22 be c6 7c f6 b2 f1 8c fa 3b 4e 09 2b cb 07 cf 79 e1 aa ea 52 1a 08 e9 c9 20 06 32 d9 de f4 57 2b e8 4a 19 bd e8 c7 40 ea 19 c2 18 9a f9 06 dd 83 6c 97 1f c4 55 f1 5e 73 5e bc ba bc d8 06 22 f6 e7 49 fe 43 c4 08 16 51 20 4e ac e0 37 5c 41 6f ea 19 c1 5a fe 1b 77 e4 Data Ascii: 40APNGIHDR szzIDATxC#$=t=m{V}lmf3:S[e2dZ1v/el%vEqtg"\|;N+yR 2W+J@lU^s^"ICQ N7\AoZw
2023-12-31 23:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49934	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	10757	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=4&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=17713770&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.MjA2MzEzMzI0MTQwMjk3NjE2CjE5MTA0MjAwNjgxNDczMDQxNgoxOTIzNzEzMDU5NTkzMTY2MzcKMjA2NTY5MDk4NTIzMDEzMzYxCjcyMDU3NjA1NDk5NTkxMDAwCjcyMDU3NjA5NjExOTU3NTY1CjcyMDU3NjA5NDkxOTAzMjQ3CjcyMDU3NjA5NTg2NDIwOTcwCjMwOTk2NDgxODM%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A1447%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A4%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B9168226299511%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:37 UTC	1186	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065797400122-11498429513319043144-balancer-l7leveler-kubr-yp-vla-167-BAL-719 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json; charset=utf-8 date: Sun, 31 Dec 2023 23:36:37 GMT expires: Sun, 31 Dec 2023 23:36:37 GMT last-modified: Sun, 31 Dec 2023 23:36:37 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache timing-allow-origin: * uniformat: true uniformat-product-type: None x-xss-protection: 1; mode=block
2023-12-31 23:36:37 UTC	661	IN	Data Raw: 32 38 45 0d 0a 7b 22 72 74 62 41 75 63 74 69 6f 6e 49 6e 66 6f 22 3a 7b 22 62 69 64 52 65 71 49 64 22 3a 37 38 33 36 32 36 39 39 31 31 36 32 31 30 33 37 30 30 30 2c 22 62 69 64 52 65 71 49 64 53 74 72 22 3a 22 37 38 33 36 32 36 39 39 31 31 36 32 31 30 33 37 30 30 38 22 2c 22 62 73 47 65 6e 65 72 61 74 65 64 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 64 73 70 49 64 22 3a 31 30 7d 2c 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 22 2c 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 72 65 6c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 22 33 30 22 2c 22 65 78 74 65 72 6e 61 6c 44 53 50 Data Ascii: 28E{"rtbAuctionInfo":{"bidReqId":7836269911621037000,"bidReqIdStr":"7836269911621037008","bsGeneratedUniqID":"5002853841704065781","dspId":10},"common":{"productType":"","pageId":"3797907","deviceType":"6","sspBidId":"","reloadTimeout":"30","externalDSP
2023-12-31 23:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49930	95.163.41.56	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:36 UTC	598	OUT	GET /cm.gif?p=155&id=80FEBCAD1084E9B5 HTTP/1.1 Host: ad.mail.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	718	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: VID=02XPUk1KP_oM002CXI2e8CoM:::0-0-0-aac53c5-0:CAASEBeyu-Xp3C0XNDS539Kzq_oaYM1nwG4HlxLIrU_YJ5rAEfQfbshcgs8ucsjpPKKO6KlxgZRZsMEAFkKf4ZusLvgkfWAxPWDpuk2sYRHsFHDObZEQQWGtHziZDJ2CVbkuP3CacXi7gQlJHOiJmEfv6hgRbQ; path=/; expires=Tue, 31-Dec-24 23:36:37 GMT; domain=.mail.ru; HttpOnly; SameSite=None; Secure Expires: Mon, 01 Jan 2024 05:36:37 GMT Cache-Control: max-age=21600 Last-Modified: Sun, 31 Dec 2023 23:36:37 GMT Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp
2023-12-31 23:36:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49927	93.158.134.242	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	405	OUT	OPTIONS /s3_nel?datacenter=MYT HTTP/1.1 Host: dr.yandex.net Connection: keep-alive Origin: https://avatars.mds.yandex.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	324	IN	HTTP/1.1 200 Ok Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,OPTIONS,POST,HEAD Access-Control-Allow-Origin: * Connection: Close Content-Length: 0 Keep-Alive: timeout=600 Timing-Allow-Origin: * Vary: Accept-Encoding X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49937	34.111.129.221	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	723	OUT	GET /cr?key=yandex&url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fdmpweborama%2F%7BWEBO_CID%7D&bounce=1&random=213360216 HTTP/1.1 Host: cr.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AFFICHE_W=AAxqB4dAAwIA84
2023-12-31 23:36:37 UTC	486	IN	HTTP/1.1 204 No Content Server: Weborama Collect Frontend Date: Sun, 31 Dec 2023 23:36:36 GMT Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Sun, 31 Dec 2023 23:36:37 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49933	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	408	OUT	GET /favicon/laboratorija-krasoty-must-have.clients.site?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:37 UTC	1008	IN	Data Raw: 33 45 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 b0 49 44 41 54 78 01 ec 97 03 8c 2c 49 18 80 bb 9f bd c6 d9 b6 6d 9b d1 8b ce b6 19 9c 6d 3b 38 db 17 9d 6d db f6 0d 1e 76 47 7d df 24 df 24 75 bd d6 f9 4f be 2d fc ac ee ae 9a da e8 3f 2f 71 34 00 d9 77 87 a4 6a 5f 07 f3 c0 5c 50 af 2a 0b 5f c3 57 90 bd fc ee 38 19 d6 02 48 3c 8e 66 45 d8 11 d6 87 05 60 1a 8c d1 a4 04 39 f8 0c 1e 87 bb e0 55 0a 29 0c b9 00 92 2f 49 73 18 ec 00 8d d0 1f f9 15 ee 86 f3 28 e2 dd 41 15 40 e2 51 ae f8 34 58 c4 e9 9c ed 34 28 c0 b5 8e 77 87 71 a1 de f6 43 38 1e ee a2 90 4a 77 79 46 f5 94 dc a0 57 c2 22 26 bb 17 0e 80 6f 35 7b 10 8e 92 07 9d fb 46 9b 7b f5 59 d4 18 bb 1b b3 ef 02 94 9d e0 0c 1f 79 06 4e 84 Data Ascii: 3E9PNGIHDR szzIDATx,Imm;8mvG}$$uO-?/q4wj_\P*_W8H<fE`9U)/Is(A@Q4X4(wqC8JwyFW"&o5{F{YyN
2023-12-31 23:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49935	82.145.213.8	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	609	OUT	GET /sync?vendor=60143&uid=75C38572774F8FE5 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:37 UTC	639	IN	HTTP/1.1 200 OK Server: Tengine Date: Sun, 31 Dec 2023 23:36:37 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Set-Cookie: UID=OPU35a80725292b449785eb96d8b460d471; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-31 23:36:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49938	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	875	OUT	GET /mapuid/mediascope/a25f35e32967d40c7ae0771106d89ad4ab87cb48a590cf065de50fb836997afa HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:38 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:38 GMT Expires: Sun, 31 Dec 2023 23:36:38 GMT Last-Modified: Sun, 31 Dec 2023 23:36:38 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49939	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	839	OUT	GET /mapuid/sapeis/0100007F00FB9165E53A996D0219B2B3 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:38 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:38 GMT Expires: Sun, 31 Dec 2023 23:36:38 GMT Last-Modified: Sun, 31 Dec 2023 23:36:38 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49941	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	656	OUT	GET /an/mapuid/yeahmobissp/ HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:38 UTC	1087	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 690 Content-Type: text/html; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:38 GMT Expires: Sun, 31 Dec 2023 23:36:38 GMT Last-Modified: Sun, 31 Dec 2023 23:36:38 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065798258154-5422513758752737558-balancer-l7leveler-kubr-yp-vla-14-BAL
2023-12-31 23:36:38 UTC	690	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 4d 45 54 41 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 72 65 66 72 65 73 68 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 30 3b 55 52 4c 3d 27 68 74 74 70 73 3a 5c 2f 5c 2f 67 77 2d 69 61 64 2d 62 69 64 2e 79 6d 6d 6f 62 69 2e 63 6f 6d 5c 2f 64 73 70 5c 2f 75 73 65 72 5c 2f 73 79 6e 63 3f 64 73 70 69 64 3d 65 57 46 75 5a 47 56 34 58 32 52 7a 63 41 3d 3d 26 67 64 70 72 3d 24 7b 47 44 50 52 7d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 24 7b 47 44 50 52 5f 43 4f 4e 53 45 4e 54 7d 26 75 73 5f 70 72 69 76 61 63 79 3d 24 26 63 61 6c 6c 62 61 63 6b 3d 24 7b 63 61 6c 6c 62 61 63 6b 7d 27 5c 22 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e Data Ascii: <html><head><noscript><META http-equiv=\"refresh\" content=\"0;URL='https:\/\/gw-iad-bid.ymmobi.com\/dsp\/user\/sync?dspid=eWFuZGV4X2RzcA==&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&us_privacy=$&callback=${callback}'\"></noscript></head><body><script>(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49943	37.230.131.16	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	580	OUT	GET /match?id=182 HTTP/1.1 Host: dm.hybrid.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	615	IN	HTTP/1.1 302 Found Date: Sun, 31 Dec 2023 23:36:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store Pragma: no-cache Expires: -1 Location: https://an.yandex.ru/mapuid/targetixis/63dc9cd61753c4390643 Set-Cookie: vid=63dc9cd61753c4390643; Expires=Mon, 30 Dec 2024 23:36:37 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure P3P: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC" X-Mode: 541 X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: https://yastatic.net Access-Control-Allow-Credentials: true Server: Hybrid Web Server

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49945	35.211.178.172	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:37 UTC	634	OUT	GET /sync?dsp_id=469&user_id=C84B2F53E2C8FECA&expires=1&user_group=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	794	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 31 Dec 2023 23:36:37 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=469&user_id=C84B2F53E2C8FECA&expires=1&user_group=1 Set-Cookie: tuuid=0b393a72-722a-4077-af79-c69c0b2206f9; path=/; expires=Mon, 30-Dec-2024 23:36:37 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1704065797; path=/; expires=Mon, 30-Dec-2024 23:36:37 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1704065797; path=/; expires=Mon, 30-Dec-2024 23:36:37 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1704065797; path=/; expires=Mon, 30-Dec-2024 23:36:37 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49944	37.230.131.16	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	583	OUT	GET /yandexdmp-match HTTP/1.1 Host: dm.hybrid.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	573	IN	HTTP/1.1 302 Found Date: Sun, 31 Dec 2023 23:36:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store Pragma: no-cache Expires: -1 Location: https://an.yandex.ru/mapuid/dmphybridai/70b721e1459717066140?sign=1643685542 Set-Cookie: vid=70b721e1459717066140; Expires=Mon, 30 Dec 2024 23:36:37 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure P3P: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC" X-Mode: 506 X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: * Server: Hybrid Web Server

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49942	93.158.134.242	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	340	OUT	POST /s3_nel?datacenter=MYT HTTP/1.1 Host: dr.yandex.net Connection: keep-alive Content-Length: 435 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	435	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 38 39 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 38 37 2e 32 35 30 2e 32 34 37 2e 31 38 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e Data Ascii: [{"age":4,"body":{"elapsed_time":1891,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.001,"server_ip":"87.250.247.182","status_code":200,"type":"ok"},"type":"network-error","url":"https://avatars.mds.yandex.n
2023-12-31 23:36:38 UTC	132	IN	HTTP/1.1 200 Ok Connection: Close Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49940	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	389	OUT	GET /favicon/xn----7sbzoqcfi.xn--p1ai?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:36:38 UTC	1775	IN	Data Raw: 36 45 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 06 af 49 44 41 54 78 01 dc 94 03 98 64 d7 12 c7 7f 55 b7 31 88 6d db 4e 66 36 ef c5 98 bc 38 e9 69 ed 4c ac b5 62 db b6 6d db b6 b5 88 cd b5 d5 7d ab de bd fb f5 cc 37 7e e6 ef ba be 53 75 fe 55 a7 ee e1 ff 82 0d 9f da 61 f1 cd 1e fb d3 e3 d1 75 24 7e a2 f2 ef 64 93 47 76 da 79 93 87 1a 46 6f 74 ff 0e e3 37 79 78 c7 70 e3 07 77 78 be ee d1 9d 97 e4 af 44 f8 3b a9 bb a7 ae ba 14 cc 77 8e bb f7 75 e1 79 71 f9 4a 84 c9 88 37 59 89 94 04 72 e0 fb 7b 3f f9 d0 bf 44 c0 3a 77 6d bf 96 aa dc e9 b0 92 1a d7 a1 b6 29 e8 c6 e0 e6 c6 2d a8 2e 2e f8 0e 86 5d 95 98 90 1e fa fe 21 8f 4d ff 67 09 90 b5 ef dc a1 8f b8 9f e7 f8 37 8a 3c e5 d8 41 22 c1 dc Data Ascii: 6E8PNGIHDR szzIDATxdU1mNf68iLbm}7~SuUau$~dGvyFot7yxpwxD;wuyqJ7Yr{?D:wm)-..]!Mg7<A"
2023-12-31 23:36:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49948	185.15.175.145	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	598	OUT	GET /1/119/i/i?i=1704065785 HTTP/1.1 Host: dmg.digitaltarget.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	766	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 31 Dec 2023 23:36:38 GMT Content-Length: 0 Connection: close Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: master-only Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Location: https://dmg.digitaltarget.ru/awg/custom/119/i/i?call_source=awg&ts=1704065798606&i=1704065785 set-cookie: viuserid=juRug82kbCg1pFM7slKJ; Max-Age=93312000; Expires=Tue, 15 Dec 2026 23:36:38 GMT; Path=/; Domain=dmg.digitaltarget.ru; Secure; HTTPOnly; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49949	84.38.189.44	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	598	OUT	GET /dmp/syncsspdmp?sspid=4 HTTP/1.1 Host: dsp.mpartner.digital Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	564	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 31 Dec 2023 23:36:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 109 Connection: close Location: https://an.yandex.ru/mapuid/mediasurferis/TMqnTlgfVayKUMqZxVpLJWFJTnRqiRab P3p: policyref="//dsp.mpartner.digital/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA" Set-Cookie: dmp=TMqnTlgfVayKUMqZxVpLJWFJTnRqiRab; Path=/; Domain=dsp.mpartner.digital; Expires=Mon, 30 Dec 2024 23:36:38 GMT; Secure; SameSite=None Strict-Transport-Security: max-age=15724800; includeSubDomains
2023-12-31 23:36:38 UTC	109	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 6d 61 70 75 69 64 2f 6d 65 64 69 61 73 75 72 66 65 72 69 73 2f 54 4d 71 6e 54 6c 67 66 56 61 79 4b 55 4d 71 5a 78 56 70 4c 4a 57 46 4a 54 6e 52 71 69 52 61 62 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://an.yandex.ru/mapuid/mediasurferis/TMqnTlgfVayKUMqZxVpLJWFJTnRqiRab">Moved Permanently</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49936	173.239.59.72	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	618	OUT	GET /user-sync?dsp=94&t=image&uid=5E2625F243647E4E HTTP/1.1 Host: sync.adkernel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:38 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:38 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store
2023-12-31 23:36:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49946	95.163.41.56	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	581	OUT	GET /cm.gif?p=155&id=80FEBCAD1084E9B5 HTTP/1.1 Host: ad.mail.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: VID=02XPUk1KP_oM002CXI2e8CoM:::0-0-0-aac53c5-0:CAASEBeyu-Xp3C0XNDS539Kzq_oaYM1nwG4HlxLIrU_YJ5rAEfQfbshcgs8ucsjpPKKO6KlxgZRZsMEAFkKf4ZusLvgkfWAxPWDpuk2sYRHsFHDObZEQQWGtHziZDJ2CVbkuP3CacXi7gQlJHOiJmEfv6hgRbQ
2023-12-31 23:36:38 UTC	404	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:38 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Mon, 01 Jan 2024 05:36:38 GMT Cache-Control: max-age=21600 Last-Modified: Sun, 31 Dec 2023 23:36:38 GMT Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy: require-corp
2023-12-31 23:36:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49947	82.145.213.8	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:38 UTC	426	OUT	GET /sync?vendor=60143&uid=75C38572774F8FE5 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=OPU35a80725292b449785eb96d8b460d471
2023-12-31 23:36:38 UTC	639	IN	HTTP/1.1 200 OK Server: Tengine Date: Sun, 31 Dec 2023 23:36:38 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Set-Cookie: UID=OPU35a80725292b449785eb96d8b460d471; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2023-12-31 23:36:38 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49951	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:39 UTC	831	OUT	GET /mapuid/targetixis/63dc9cd61753c4390643 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:39 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:39 GMT Expires: Sun, 31 Dec 2023 23:36:39 GMT Last-Modified: Sun, 31 Dec 2023 23:36:39 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49950	35.211.178.172	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:39 UTC	727	OUT	GET /ul_cb/sync?dsp_id=469&user_id=C84B2F53E2C8FECA&expires=1&user_group=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=0b393a72-722a-4077-af79-c69c0b2206f9; c=1704065797; tuuid_lu=1704065797
2023-12-31 23:36:39 UTC	647	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 31 Dec 2023 23:36:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=0b393a72-722a-4077-af79-c69c0b2206f9&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: tuuid=0b393a72-722a-4077-af79-c69c0b2206f9; path=/; expires=Mon, 30-Dec-2024 23:36:39 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1704065799; path=/; expires=Mon, 30-Dec-2024 23:36:39 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49952	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:39 UTC	683	OUT	GET /mapuid/sapeis/0100007F00FB9165E53A996D0219B2B3 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:39 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:39 GMT Expires: Sun, 31 Dec 2023 23:36:39 GMT Last-Modified: Sun, 31 Dec 2023 23:36:39 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49953	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:39 UTC	719	OUT	GET /mapuid/mediascope/a25f35e32967d40c7ae0771106d89ad4ab87cb48a590cf065de50fb836997afa HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:39 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:39 GMT Expires: Sun, 31 Dec 2023 23:36:39 GMT Last-Modified: Sun, 31 Dec 2023 23:36:39 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49954	176.9.79.218	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:39 UTC	684	OUT	GET /cookiesync/redirect/yandex?redirect_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbuzzooladspis%2F%24%7BUUID%7D HTTP/1.1 Host: exchange.buzzoola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:39 UTC	272	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 31 Dec 2023 23:36:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 113 Connection: close Location: https://an.yandex.ru/mapuid/buzzooladspis/6e571dea-6068-4248-5b37-8ba353285112 ServerID: TODO
2023-12-31 23:36:39 UTC	113	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 6d 61 70 75 69 64 2f 62 75 7a 7a 6f 6f 6c 61 64 73 70 69 73 2f 36 65 35 37 31 64 65 61 2d 36 30 36 38 2d 34 32 34 38 2d 35 62 33 37 2d 38 62 61 33 35 33 32 38 35 31 31 32 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://an.yandex.ru/mapuid/buzzooladspis/6e571dea-6068-4248-5b37-8ba353285112">Moved Permanently</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49955	54.229.5.240	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:39 UTC	667	OUT	GET /server_match?partner_id=N&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fazerionis%2F{PUB_USER_ID} HTTP/1.1 Host: euw-ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:39 UTC	650	IN	HTTP/1.1 302 Found Date: Sun, 31 Dec 2023 23:36:39 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=72cd074f-1f56-429d-956b-4f5c3854b25f; Expires=Sat, 30 Mar 2024 23:36:39 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1704065799; Expires=Sat, 30 Mar 2024 23:36:39 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://euw-ice.360yield.com/ul_cb/server_match?partner_id=N&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fazerionis%2F%7BPUB_USER_ID%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49959	185.15.175.145	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	679	OUT	GET /awg/custom/119/i/i?call_source=awg&ts=1704065798606&i=1704065785 HTTP/1.1 Host: dmg.digitaltarget.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: viuserid=juRug82kbCg1pFM7slKJ
2023-12-31 23:36:40 UTC	564	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 31 Dec 2023 23:36:40 GMT Content-Length: 0 Connection: close Referrer-Policy: origin-when-cross-origin, strict-origin-when-cross-origin X-Frame-Options: DENY X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: master-only Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Location: https://an.yandex.ru/mapuid/dmpamberdata/juRug82kbCg1pFM7slKJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49957	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	848	OUT	GET /mapuid/dmphybridai/70b721e1459717066140?sign=1643685542 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:40 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:40 GMT Expires: Sun, 31 Dec 2023 23:36:40 GMT Last-Modified: Sun, 31 Dec 2023 23:36:40 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49956	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	1959	OUT	POST /watch/95527089?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&charset=utf-8&hittoken=1704065788_fa54d8960a9d26439f5af1c19556edcaf70a643ffa0b4031d304b9aba8a0ad31&browser-info=nb%3A1%3Acl%3A7591%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A1042935619%3Az%3A60%3Ai%3A20240101003638%3Aet%3A1704065799%3Ac%3A1%3Arn%3A815062017%3Arqn%3A3%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065769390%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065799&t=gdpr(14%2C14%2C14%2C14%2C14)mc(p-2-h-1)clc(1-575-636)rqnt(3)lt(165200)aw(1)rcm(1)ecs(0)fid(130)ti(0)&force-urlencoded=1 HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787
2023-12-31 23:36:40 UTC	1148	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:40 GMT Expires: Sun, 31-Dec-2023 23:36:40 GMT Last-Modified: Sun, 31-Dec-2023 23:36:40 GMT Pragma: no-cache Set-Cookie: bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=; Expires=Mon, 30-Dec-2024 23:36:40 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:36:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49960	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	846	OUT	GET /mapuid/mediasurferis/TMqnTlgfVayKUMqZxVpLJWFJTnRqiRab HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:40 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:40 GMT Expires: Sun, 31 Dec 2023 23:36:40 GMT Last-Modified: Sun, 31 Dec 2023 23:36:40 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49963	104.36.113.107	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	737	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=0b393a72-722a-4077-af79-c69c0b2206f9&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:40 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:39 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-0b393a72-722a-4077-af79-c69c0b2206f9; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 30-Mar-2024 23:36:39 GMT; path=/ Set-Cookie: PugT=1704065799; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 30-Jan-2024 23:36:39 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-31 23:36:40 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49958	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	1563	OUT	GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=26&viewability-undetermined=0 HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:40 UTC	1134	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:40 GMT Expires: Sun, 31 Dec 2023 23:36:40 GMT Last-Modified: Sun, 31 Dec 2023 23:36:40 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065800680207-1077498611559952384-balancer-l7leveler-kubr-yp-vla-55-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49962	54.229.5.240	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	750	OUT	GET /ul_cb/server_match?partner_id=N&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fazerionis%2F%7BPUB_USER_ID%7D HTTP/1.1 Host: euw-ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=72cd074f-1f56-429d-956b-4f5c3854b25f; tuuid_lu=1704065799
2023-12-31 23:36:40 UTC	321	IN	HTTP/1.1 302 Found Date: Sun, 31 Dec 2023 23:36:40 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://an.yandex.ru/mapuid/azerionis/72cd074f-1f56-429d-956b-4f5c3854b25f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49961	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	850	OUT	GET /mapuid/buzzooladspis/6e571dea-6068-4248-5b37-8ba353285112 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:40 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:40 GMT Expires: Sun, 31 Dec 2023 23:36:40 GMT Last-Modified: Sun, 31 Dec 2023 23:36:40 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49964	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	675	OUT	GET /mapuid/targetixis/63dc9cd61753c4390643 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:41 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:40 GMT Expires: Sun, 31 Dec 2023 23:36:40 GMT Last-Modified: Sun, 31 Dec 2023 23:36:40 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49967	51.250.81.61	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	584	OUT	GET /sync/yandex/ HTTP/1.1 Host: eye.targetads.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:41 UTC	292	IN	HTTP/1.1 302 Found server: ycalb date: Sun, 31 Dec 2023 23:36:40 GMT content-length: 0 location: https://an.yandex.ru/mapuid/part_id/11732138183223988288 set-cookie: _TADUID=11732138183223988288; max-age=31536000; domain=targetads.io; path=/; secure; SameSite=None connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49966	217.199.220.44	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:40 UTC	584	OUT	GET /rtb/sync/yandex HTTP/1.1 Host: kimberlite.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:41 UTC	729	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 31 Dec 2023 23:36:41 GMT Content-Length: 0 Connection: close cache-control: no-store access-control-allow-credentials: true access-control-allow-origin: * set-cookie: u=ZZH7Ca1W1uM~q8RWLvAMdkdTezQk86fZXKmI25Q; path=/; max-age=7776000; samesite=none; httponly; secure set-cookie: as=OFrH4WWR-wk; max-age=604800; samesite=none; httponly; secure set-cookie: f=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsoltadspis%2FZZH7Ca1W1uM; max-age=30; samesite=none; httponly; secure set-cookie: n=1; max-age=30; samesite=none; httponly; secure location: https://sm.rtb.mts.ru/p?ssp=toptraffic&id=ZZH7Ca1W1uM referrer-policy: no-referrer server-timing: app;srv=0;dur=0.0001

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49968	104.36.113.107	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	589	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=0b393a72-722a-4077-af79-c69c0b2206f9&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KRTBCOOKIE_466=16530-0b393a72-722a-4077-af79-c69c0b2206f9; PugT=1704065799
2023-12-31 23:36:41 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:41 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-0b393a72-722a-4077-af79-c69c0b2206f9; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 30-Mar-2024 23:36:41 GMT; path=/ Set-Cookie: PugT=1704065801; domain=pubmatic.com; SameSite=None; secure; expires=Tue, 30-Jan-2024 23:36:41 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2023-12-31 23:36:41 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49969	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	833	OUT	GET /mapuid/dmpamberdata/juRug82kbCg1pFM7slKJ HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:41 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:41 GMT Expires: Sun, 31 Dec 2023 23:36:41 GMT Last-Modified: Sun, 31 Dec 2023 23:36:41 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49971	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	692	OUT	GET /mapuid/dmphybridai/70b721e1459717066140?sign=1643685542 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:41 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:41 GMT Expires: Sun, 31 Dec 2023 23:36:41 GMT Last-Modified: Sun, 31 Dec 2023 23:36:41 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49972	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	690	OUT	GET /mapuid/mediasurferis/TMqnTlgfVayKUMqZxVpLJWFJTnRqiRab HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:41 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:41 GMT Expires: Sun, 31 Dec 2023 23:36:41 GMT Last-Modified: Sun, 31 Dec 2023 23:36:41 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49973	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	1396	OUT	GET /an/tracking/WX4ejI_zOoVX2Lbq0HqG0CEUT3w4s8S8Un2D7aGP19FlikB5R7ziv8ArqrYpKwRr7V9ItncRUAAbfQMbfQMpOv80iSyXszEez9usF_pDm1wEFuJf3zu4yjZaFkmU12CzZ65emtHVKdHC8VGWBc407QUAj4Zf2HswdoFmd91UPt2m_kPhemT9pbM5BK965U5W9e23k7dMvJArWSp0bReDuoMKU8Du0B8XKzui2qa6BphjNT4mRfvr8ULgnZCrOfYQi4TiRDHhm41PQ3NS65tNQ_If5uy0jXds8WdaiSbXq8V8kg4Fn2iduWlS4avW2tkAjojWJ5LajorDcKPbSoPGBaaP1qgb5R7UxCvWa2cZPR8czCQYmD2HGIWKeIbiFGKTPaAPrdNm3ctKLepOn-WKe6386634pJQOxn1uEG76a1KnJ3S5aHk60CmtMvgxT_jaJtNMzyDCDIrHFXZdM_Y_0hXXVQy0RbYVQ_E4xUz6ZVlNlW2IvMTV0Cd2D2y9cMKElBgkwrZQxBlul3JOnet87BtRv7d_FDctoPKX_JX4bYqnIF-bqICI2wJdqhgkM-aHYGNIxtzGyiiqU8RSlTPtyNbzrdVnURtEd14p1y9oITzOhbGgbTOUaLriMadvoLh8PwLIgGmD_0EK8OzJlwzt6-BAFyG1UTqPtVm4c4i59Q-VhVhgZiSNmT5AwliD5Gq5BFK_~2?action-id=26&viewability-undetermined=0 HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:41 UTC	1046	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:41 GMT Expires: Sun, 31 Dec 2023 23:36:41 GMT Last-Modified: Sun, 31 Dec 2023 23:36:41 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065801808013-13347741102338216423-balancer-l7leveler-kubr-yp-vla-16-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49974	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	846	OUT	GET /mapuid/azerionis/72cd074f-1f56-429d-956b-4f5c3854b25f HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:41 UTC	564	IN	HTTP/1.1 302 Found Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:36:41 GMT Expires: Sun, 31 Dec 2023 23:36:41 GMT Last-Modified: Sun, 31 Dec 2023 23:36:41 GMT Location: https://match.360yield.com/match?external_user_id=72cd074f-1f56-429d-956b-4f5c3854b25f&publisher_dsp_id=429&publisher_call_type=redirect P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49965	173.239.59.72	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	386	OUT	GET /user-sync?dsp=94&t=image&uid=5E2625F243647E4E HTTP/1.1 Host: sync.adkernel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:41 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:41 GMT Content-Type: image/gif Content-Length: 42 Connection: close Cache-Control: no-store
2023-12-31 23:36:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49970	217.65.2.150	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	612	OUT	GET /userbind?src=yandex&pbf=1&gi=1 HTTP/1.1 Host: match.new-programmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:41 UTC	257	IN	HTTP/1.1 302 Found Server: nginx/1.22.1 Date: Sun, 31 Dec 2023 23:36:41 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Vary: Origin Location: https://an.yandex.ru/mapuid/targetrtbis/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	49976	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	694	OUT	GET /mapuid/buzzooladspis/6e571dea-6068-4248-5b37-8ba353285112 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:42 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:42 GMT Expires: Sun, 31 Dec 2023 23:36:42 GMT Last-Modified: Sun, 31 Dec 2023 23:36:42 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	49975	94.130.221.58	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	609	OUT	GET /yandex/cm?user_id={partner_user_id} HTTP/1.1 Host: nr.bidderstack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:41 UTC	367	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:41 GMT Content-Length: 0 Connection: close Location: /yandex/cm?user_id={partner_user_id}&pupa=1 Set-Cookie: pupa=75308997-0fdc-36f2-363e-1132a596a784; domain=.bidderstack.com; path=/; expires=Mon, 30-Dec-2024 23:36:41 GMT; Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	49977	91.192.149.30	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	595	OUT	GET /sync3.302?pid=188 HTTP/1.1 Host: profile.ssp.rambler.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:42 UTC	357	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:42 GMT Content-Type: application/x-javascript Content-Length: 0 Connection: close Location: //an.yandex.ru/mapuid/ramblerssp/ X-Passed: 1bal2 Strict-Transport-Security: max-age=0 p3p: policyref="/w3c/p3p.xml", CP="NON DSP COR CUR ADM DEV PSA PSD OUR UNR BUS UNI COM NAV INT DEM STA"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49978	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:41 UTC	828	OUT	GET /mapuid/part_id/11732138183223988288 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:42 UTC	461	IN	HTTP/1.1 404 Not Found Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:42 GMT Expires: Sun, 31 Dec 2023 23:36:42 GMT Last-Modified: Sun, 31 Dec 2023 23:36:42 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	49980	217.66.147.35	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	568	OUT	GET /p?ssp=toptraffic&id=ZZH7Ca1W1uM HTTP/1.1 Host: sm.rtb.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:42 UTC	612	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 31 Dec 2023 23:36:42 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Origin: * Vary: Origin Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://vma.mts.ru/match/second?ssp=59&exu=ZZH7Ca1W1uM Set-Cookie: dspid=e27c7e98-47aa-4e02-bd89-b573f3e9f025; expires=Sat, 21 Dec 2024 23:36:42 GMT; domain=.mts.ru; path=/; secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	49981	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	812	OUT	GET /mapuid/targetrtbis/ HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:42 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:42 GMT Expires: Sun, 31 Dec 2023 23:36:42 GMT Last-Modified: Sun, 31 Dec 2023 23:36:42 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	49983	94.130.221.58	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	616	OUT	GET /yandex/cm?user_id={partner_user_id}&pupa=1 HTTP/1.1 Host: nr.bidderstack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:42 UTC	189	IN	HTTP/1.1 204 No Content Server: nginx Date: Sun, 31 Dec 2023 23:36:42 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	49982	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	677	OUT	GET /mapuid/dmpamberdata/juRug82kbCg1pFM7slKJ HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:42 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:42 GMT Expires: Sun, 31 Dec 2023 23:36:42 GMT Last-Modified: Sun, 31 Dec 2023 23:36:42 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	49985	34.199.149.230	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	756	OUT	GET /match?external_user_id=72cd074f-1f56-429d-956b-4f5c3854b25f&publisher_dsp_id=429&publisher_call_type=redirect HTTP/1.1 Host: match.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=72cd074f-1f56-429d-956b-4f5c3854b25f; tuuid_lu=1704065799
2023-12-31 23:36:42 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 31 Dec 2023 23:36:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
2023-12-31 23:36:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	49984	193.232.150.149	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	583	OUT	GET /p/cm/yandexssp HTTP/1.1 Host: px.adhigh.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:43 UTC	582	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:42 GMT Content-Length: 0 Connection: close X-Backend-id: f16-ru Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Set-Cookie: gi_u=78eEqA8RIBw.AikABlGMwjyiow;Path=/;Domain=.adhigh.net;Expires=Mon, 30-Dec-2024 23:36:42 GMT;Secure;SameSite=None P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-cache Cache-Control: no-store Location: https://px.adhigh.net/p/cm/yandexssp?bounced=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	49986	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	811	OUT	GET /mapuid/ramblerssp/ HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:43 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:43 GMT Expires: Sun, 31 Dec 2023 23:36:43 GMT Last-Modified: Sun, 31 Dec 2023 23:36:43 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	49987	172.67.72.191	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:42 UTC	583	OUT	GET /um/y HTTP/1.1 Host: rtb-eu-warsaw.intent.ai Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:43 UTC	1088	IN	HTTP/1.1 200 OK Date: Sun, 31 Dec 2023 23:36:43 GMT Content-Type: image/png Content-Length: 68 Connection: close Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Wed, 11 Nov 1998 11:11:11 GMT last-modified: Sun, 31 Dec 2023 23:36:43 GMT pragma: no-cache strict-transport-security: max-age=15724800; includeSubDomains access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization access-control-max-age: 1728000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hsLAaoOHp8a0CbREWO5LcvOjTBd4%2F3QqzACJhXKqklOOtYKiH7Ed2xzzXQfFhcpYTPIAu16%2FOtwCvymXJntF5W2AX73fbtNfFuvUSEb1vyUwYCf4NWadsb2nL%2BRUeRULmdlR5u3tYgaY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83e658a5b8196b6b-DFW
2023-12-31 23:36:43 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 64 60 00 00 00 06 00 02 30 81 d0 2f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcd`0/IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	49990	34.232.60.164	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	524	OUT	GET /match?external_user_id=72cd074f-1f56-429d-956b-4f5c3854b25f&publisher_dsp_id=429&publisher_call_type=redirect HTTP/1.1 Host: match.360yield.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=72cd074f-1f56-429d-956b-4f5c3854b25f; tuuid_lu=1704065799
2023-12-31 23:36:43 UTC	232	IN	HTTP/1.1 200 OK Date: Sun, 31 Dec 2023 23:36:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
2023-12-31 23:36:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	49989	31.220.27.135	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	580	OUT	GET /match/501 HTTP/1.1 Host: s.uuidksinc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:43 UTC	321	IN	HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Sun, 31 Dec 2023 23:36:43 GMT Content-Length: 0 Connection: close Location: https://an.yandex.ru/mapuid/kadamis/jlsh0vPI9KeQ7HmZAbgh Set-Cookie: jcsuuid=jlsh0vPI9KeQ7HmZAbgh; expires=Mon, 30 Dec 2024 23:36:43 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	49988	217.66.147.40	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	621	OUT	GET /match/second?ssp=59&exu=ZZH7Ca1W1uM HTTP/1.1 Host: vma.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=e27c7e98-47aa-4e02-bd89-b573f3e9f025
2023-12-31 23:36:43 UTC	679	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 31 Dec 2023 23:36:43 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Origin: * Vary: Origin Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://tech.rtb.mts.ru/?dsp_uid=e27c7e98-47aa-4e02-bd89-b573f3e9f025&return_url=https%3A%2F%2Fpixel.konnektu.ru%2Fredirect%2Fmts%3Fcallback_url%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D1%2526ssp%253Dkonnektu%2526id%253D%257BUSER_ID%257D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	49991	217.66.147.35	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	640	OUT	GET /p?ssp=yandex&id=map HTTP/1.1 Host: sm.rtb.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=e27c7e98-47aa-4e02-bd89-b573f3e9f025
2023-12-31 23:36:44 UTC	710	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 31 Dec 2023 23:36:43 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Origin: * Vary: Origin Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://vma.mts.ru/match/second?ssp=55 Set-Cookie: dspid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa; expires=Sat, 21 Dec 2024 23:36:43 GMT; domain=.mts.ru; path=/; secure; SameSite=None Set-Cookie: reset_cookie=1; expires=Sat, 21 Dec 2024 23:36:43 GMT; domain=.mts.ru; path=/; secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	49992	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	656	OUT	GET /mapuid/targetrtbis/ HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:44 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:43 GMT Expires: Sun, 31 Dec 2023 23:36:43 GMT Last-Modified: Sun, 31 Dec 2023 23:36:43 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	49993	193.232.150.149	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	634	OUT	GET /p/cm/yandexssp?bounced=1 HTTP/1.1 Host: px.adhigh.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gi_u=78eEqA8RIBw.AikABlGMwjyiow
2023-12-31 23:36:44 UTC	590	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:44 GMT Content-Length: 0 Connection: close X-Backend-id: f16-ru Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-cache Cache-Control: no-store Set-Cookie: yandexssp_sync=LL6c;Path=/;Domain=.adhigh.net;Expires=Mon, 30-Dec-2024 23:36:44 GMT;Secure;SameSite=None Location: https://an.yandex.ru/mapuid/getintentis/78eEqA8RIBw.AikABlGMwjyiow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	49996	104.26.14.69	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	351	OUT	GET /um/y HTTP/1.1 Host: rtb-eu-warsaw.intent.ai Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:44 UTC	1088	IN	HTTP/1.1 200 OK Date: Sun, 31 Dec 2023 23:36:44 GMT Content-Type: image/png Content-Length: 68 Connection: close Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Wed, 11 Nov 1998 11:11:11 GMT last-modified: Sun, 31 Dec 2023 23:36:44 GMT pragma: no-cache strict-transport-security: max-age=15724800; includeSubDomains access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization access-control-max-age: 1728000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CTkFWAMslSE18ooaklDZyhMGLvFuVbzmyBXzb3rihe2kEE9Dvj8jiTTZ%2BqPp%2BH%2FUdkWNWBcjAEprevitQUVBFC07sAFuozedAX5EnL6yIOVBy4bQnQKpUIJdyW1vALgu82awS6UA2Eff"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 83e658aadbe82ccf-DFW
2023-12-31 23:36:44 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 64 60 00 00 00 06 00 02 30 81 d0 2f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcd`0/IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	49995	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:43 UTC	655	OUT	GET /mapuid/ramblerssp/ HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:44 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:44 GMT Expires: Sun, 31 Dec 2023 23:36:44 GMT Last-Modified: Sun, 31 Dec 2023 23:36:44 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	49997	95.217.109.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	586	OUT	GET /dmp/scr.php HTTP/1.1 Host: sonar.semantiqo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:44 UTC	921	IN	HTTP/1.1 302 Found Server: nginx/1.20.1 Date: Sun, 31 Dec 2023 23:36:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: semantiqo_a=dc9184c219bd4f10a1ea45afbea02ea2; expires=Fri, 02-Feb-2029 23:36:44 GMT; Max-Age=160704000; path=/; SameSite=None; Secure; domain=sonar.semantiqo.com Set-Cookie: check=385c527be6024268942e57d82e1f2d49; expires=Mon, 06-Jan-2025 23:36:44 GMT; Max-Age=32140800; path=/; SameSite=None; Secure; domain=sonar.semantiqo.com Location: https://counter.yadro.ru/id127/reff-id.gif?sid=dc9184c219bd4f10a1ea45afbea02ea2 mode: no-cors Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Access-Control-Allow-Headers, Origin,Accept, x-compress, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers Cache-Control: no-cache
2023-12-31 23:36:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	49994	77.244.216.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	601	OUT	GET /api/rtb/dmp/pixel?partner=yandex HTTP/1.1 Host: shopnetic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:44 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 31 Dec 2023 23:36:44 GMT Content-Type: text/html Content-Length: 154 Location: https://shopnetic.com/api/rtb/dmp/pixel?partner=yandex&tc=1 Connection: close Set-Cookie: test_cookie=1; Secure; SameSite=None
2023-12-31 23:36:44 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	49998	81.222.128.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	597	OUT	GET /cgi-bin/sync.cgi?dsp_id=109 HTTP/1.1 Host: ssp.adriver.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:44 UTC	143	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:44 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2023-12-31 23:36:44 UTC	53	IN	Data Raw: 32 61 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2aGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50000	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	828	OUT	GET /mapuid/kadamis/jlsh0vPI9KeQ7HmZAbgh HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:45 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:44 GMT Expires: Sun, 31 Dec 2023 23:36:44 GMT Last-Modified: Sun, 31 Dec 2023 23:36:44 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50001	217.66.147.40	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	653	OUT	GET /match/second?ssp=55 HTTP/1.1 Host: vma.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa; reset_cookie=1
2023-12-31 23:36:45 UTC	582	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 31 Dec 2023 23:36:44 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Origin: * Vary: Origin Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://tech.rtb.mts.ru/?dsp_uid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa&return_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fmtsdspis%2F6109ac2d-3456-4f35-bc9e-ff6acc68d7fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50002	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	838	OUT	GET /mapuid/getintentis/78eEqA8RIBw.AikABlGMwjyiow HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:45 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:45 GMT Expires: Sun, 31 Dec 2023 23:36:45 GMT Last-Modified: Sun, 31 Dec 2023 23:36:45 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	49999	213.87.44.187	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	830	OUT	GET /?dsp_uid=e27c7e98-47aa-4e02-bd89-b573f3e9f025&return_url=https%3A%2F%2Fpixel.konnektu.ru%2Fredirect%2Fmts%3Fcallback_url%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D1%2526ssp%253Dkonnektu%2526id%253D%257BUSER_ID%257D HTTP/1.1 Host: tech.rtb.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=e27c7e98-47aa-4e02-bd89-b573f3e9f025
2023-12-31 23:36:44 UTC	822	IN	HTTP/1.1 302 Found Server: nginx/1.20.2 Date: Sun, 31 Dec 2023 23:36:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: mts_id=cefee669-5874-4c83-a6f5-4e5b6eec28c7; Domain=mts.ru; expires=Tue, 08 Nov 2033 23:36:45 GMT; SameSite=None; Secure Set-Cookie: mts_id_last_sync=1704065805; Domain=mts.ru; expires=Tue, 08 Nov 2033 23:36:45 GMT; SameSite=None; Secure Location: https://pixel.konnektu.ru/redirect/mts?callback_url=https%3A%2F%2Fvma.mts.ru%2Fem%3Fnext%3D59%26em%3D1%26ssp%3Dkonnektu%26id%3D%7BUSER_ID%7D Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
2023-12-31 23:36:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50003	77.244.216.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:44 UTC	629	OUT	GET /api/rtb/dmp/pixel?partner=yandex&tc=1 HTTP/1.1 Host: shopnetic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=1
2023-12-31 23:36:45 UTC	531	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS" Cache-Control: no-cache, private, max-age=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 03:00:00 MSK Set-Cookie: shuniq=pCX6AZl7n_VNArG5XeOx1PghDdE; expires=Sun, 31 Dec 2028 23:36:45 GMT; path=/; secure; SameSite=None X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000
2023-12-31 23:36:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50004	81.222.128.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	596	OUT	GET /cgi-bin/sync.cgi?ssp_id=19 HTTP/1.1 Host: ssp.adriver.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:45 UTC	143	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:45 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2023-12-31 23:36:45 UTC	53	IN	Data Raw: 32 61 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2aGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50005	88.212.202.52	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	626	OUT	GET /id127/reff-id.gif?sid=dc9184c219bd4f10a1ea45afbea02ea2 HTTP/1.1 Host: counter.yadro.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:45 UTC	327	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.17.9 Date: Sun, 31 Dec 2023 23:36:45 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 364 Connection: close Location: https://sonar.semantiqo.com/fbfli/data_sess_sync.php?spid=&sid=dc9184c219bd4f10a1ea45afbea02ea2 Strict-Transport-Security: max-age=86400
2023-12-31 23:36:45 UTC	364	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 6f 6e 61 72 2e 73 65 6d 61 6e 74 69 71 6f 2e 63 6f 6d 2f 66 62 66 6c 69 2f 64 61 74 61 5f 73 65 73 73 5f 73 79 6e 63 2e 70 68 70 3f 73 70 69 64 3d 26 61 6d 70 3b 73 69 64 3d 64 63 39 31 38 34 63 32 31 39 62 64 34 66 31 30 61 31 65 61 34 35 61 66 62 65 61 30 32 65 61 32 22 3e 68 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://sonar.semantiqo.com/fbfli/data_sess_sync.php?spid=&sid=dc9184c219bd4f10a1ea45afbea02ea2">h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50006	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	672	OUT	GET /mapuid/kadamis/jlsh0vPI9KeQ7HmZAbgh HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:46 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:46 GMT Expires: Sun, 31 Dec 2023 23:36:46 GMT Last-Modified: Sun, 31 Dec 2023 23:36:46 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50008	81.222.128.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	365	OUT	GET /cgi-bin/sync.cgi?dsp_id=109 HTTP/1.1 Host: ssp.adriver.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:46 UTC	143	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:46 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2023-12-31 23:36:46 UTC	53	IN	Data Raw: 32 61 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2aGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50011	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	682	OUT	GET /mapuid/getintentis/78eEqA8RIBw.AikABlGMwjyiow HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:46 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:46 GMT Expires: Sun, 31 Dec 2023 23:36:46 GMT Last-Modified: Sun, 31 Dec 2023 23:36:46 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50007	213.87.44.187	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	855	OUT	GET /?dsp_uid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa&return_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fmtsdspis%2F6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1 Host: tech.rtb.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa; reset_cookie=1; mts_id=cefee669-5874-4c83-a6f5-4e5b6eec28c7; mts_id_last_sync=1704065805
2023-12-31 23:36:46 UTC	503	IN	HTTP/1.1 302 Found Server: nginx/1.20.2 Date: Sun, 31 Dec 2023 23:36:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Location: https://an.yandex.ru/mapuid/mtsdspis/6109ac2d-3456-4f35-bc9e-ff6acc68d7fa Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With
2023-12-31 23:36:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50009	31.172.81.160	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	582	OUT	GET /?src=yandex HTTP/1.1 Host: sync.bumlam.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:46 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
2023-12-31 23:36:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50010	31.172.81.160	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:45 UTC	583	OUT	GET /?src=yandex2 HTTP/1.1 Host: sync.bumlam.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:46 UTC	718	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 31 Dec 2023 23:36:46 GMT Content-Length: 0 Connection: close Set-Cookie: suuid3=IiQ3NWZiNjRkNC1hODM1LTExZWUtODZlMC0wMDI1OTBjMDY0N2M; Path=/; Expires=Sat, 26 Dec 2043 23:36:46 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Location: //sync.bumlam.com/?src=yandex2&s_data=CAIQARiO9sesBqIBEHX7ZNSoNRHuhuAAJZDAZHw ETag: 75fb64d4-a835-11ee-86e0-002590c0647c Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0 Access-Control-Allow-Origin: https://yastatic.net Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50013	77.244.216.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	433	OUT	GET /api/rtb/dmp/pixel?partner=yandex&tc=1 HTTP/1.1 Host: shopnetic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=1; shuniq=pCX6AZl7n_VNArG5XeOx1PghDdE
2023-12-31 23:36:46 UTC	413	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS" Cache-Control: no-cache, private, max-age=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 03:00:00 MSK X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000
2023-12-31 23:36:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50014	130.193.58.13	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	655	OUT	GET /redirect/mts?callback_url=https%3A%2F%2Fvma.mts.ru%2Fem%3Fnext%3D59%26em%3D1%26ssp%3Dkonnektu%26id%3D%7BUSER_ID%7D HTTP/1.1 Host: pixel.konnektu.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:46 UTC	381	IN	HTTP/1.1 302 Found server: ycalb access-control-allow-origin: access-control-allow-methods: GET, POST, OPTIONS access-control-allow-credentials: true access-control-allow-headers: Content-Type location: https://vma.mts.ru/em?next=59&em=1&ssp=konnektu&id= content-type: text/plain; charset=UTF-8 date: Sun, 31 Dec 2023 23:36:46 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50016	95.217.109.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	736	OUT	GET /fbfli/data_sess_sync.php?spid=&sid=dc9184c219bd4f10a1ea45afbea02ea2 HTTP/1.1 Host: sonar.semantiqo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: semantiqo_a=dc9184c219bd4f10a1ea45afbea02ea2; check=385c527be6024268942e57d82e1f2d49
2023-12-31 23:36:46 UTC	482	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sun, 31 Dec 2023 23:36:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close mode: no-cors Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Access-Control-Allow-Headers, Origin,Accept, x-compress, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers Cache-Control: no-cache
2023-12-31 23:36:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50015	81.222.128.216	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	364	OUT	GET /cgi-bin/sync.cgi?ssp_id=19 HTTP/1.1 Host: ssp.adriver.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:46 UTC	143	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:46 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close
2023-12-31 23:36:46 UTC	53	IN	Data Raw: 32 61 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2aGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50012	194.55.244.185	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	590	OUT	GET /match/yandexortb HTTP/1.1 Host: sync.dmp.otm-r.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:46 UTC	137	IN	HTTP/1.1 204 No Content Server: nginx/1.23.2 Date: Sun, 31 Dec 2023 23:36:46 GMT Connection: close Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50018	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	845	OUT	GET /mapuid/mtsdspis/6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:47 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:47 GMT Expires: Sun, 31 Dec 2023 23:36:47 GMT Last-Modified: Sun, 31 Dec 2023 23:36:47 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50017	188.42.105.236	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	600	OUT	GET /match/yandex?id=[buyerUid] HTTP/1.1 Host: sync.gonet-ads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:47 UTC	405	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Length: 0 Connection: close Location: https://sync.gonet-ads.com/match/yandex?id=%5BbuyerUid%5D&chk=1 Set-Cookie: chk=1; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50019	31.172.81.160	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:46 UTC	700	OUT	GET /?src=yandex2&s_data=CAIQARiO9sesBqIBEHX7ZNSoNRHuhuAAJZDAZHw* HTTP/1.1 Host: sync.bumlam.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suuid3=IiQ3NWZiNjRkNC1hODM1LTExZWUtODZlMC0wMDI1OTBjMDY0N2M
2023-12-31 23:36:47 UTC	711	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: suuid3=IiQ3NWZiNjRkNC1hODM1LTExZWUtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Sat, 26 Dec 2043 23:36:47 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Location: https://an.yandex.ru/mapuid/adsniperis/75fb64d4-a835-11ee-86e0-002590c0647c Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0 Access-Control-Allow-Origin: https://yastatic.net Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50020	213.239.194.43	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	583	OUT	GET /yandex/sync HTTP/1.1 Host: sync.upravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:47 UTC	843	IN	HTTP/1.1 302 Server: nginx Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Type: image/png Content-Length: 0 Connection: close Location: https://sync.upravel.com/yandex/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly95YXN0YXRpYy5uZXQvIl19fQ Set-Cookie: session_tptc=1704065807189;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=180 Set-Cookie: session_tptc-legacy=1704065807189;Version=1;Domain=.upravel.com;Path=/;Max-Age=180 P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range Access-Control-Expose-Headers: Content-Length,Content-Range Access-Control-Allow-Credentials: false

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50021	31.172.81.172	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	350	OUT	GET /?src=yandex HTTP/1.1 Host: sync.bumlam.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:47 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
2023-12-31 23:36:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50022	217.66.147.40	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	708	OUT	GET /em?next=59&em=1&ssp=konnektu&id= HTTP/1.1 Host: vma.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa; reset_cookie=1; mts_id=cefee669-5874-4c83-a6f5-4e5b6eec28c7; mts_id_last_sync=1704065805
2023-12-31 23:36:47 UTC	489	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Origin: * Vary: Origin Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://kimberlite.io/rtb/sync/mts?u=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50023	89.108.119.28	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	585	OUT	GET /0.gif?pid=YANDEX HTTP/1.1 Host: x01.aidata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:47 UTC	693	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Length: 0 Connection: close Location: https://x01.aidata.io/0.gif?pid=YANDEX&bounce=1 Expires: Sun, 31 Dec 2023 23:36:46 GMT Cache-Control: no-cache Access-Control-Allow-Methods: GET, POST Pragma: no-cache Cache-Control: no-store, must-revalidate, post-check=0, pre-check=0 Last-Modified: Sun, 31 Dec 2023 23:36:46 GMT Set-Cookie: __upin=hE5fvW5C6phElzeLbqladQ;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure Set-Cookie: __upints=1704065807;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50025	95.217.109.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	504	OUT	GET /fbfli/data_sess_sync.php?spid=&sid=dc9184c219bd4f10a1ea45afbea02ea2 HTTP/1.1 Host: sonar.semantiqo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: semantiqo_a=dc9184c219bd4f10a1ea45afbea02ea2; check=385c527be6024268942e57d82e1f2d49
2023-12-31 23:36:47 UTC	482	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close mode: no-cors Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS Access-Control-Allow-Headers: Access-Control-Allow-Headers, Origin,Accept, x-compress, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers Cache-Control: no-cache
2023-12-31 23:36:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50024	45.9.24.193	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	587	OUT	GET /sync HTTP/1.1 Host: yandex-dmp-sync.rutarget.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:47 UTC	427	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 31 Dec 2023 23:36:47 GMT Content-Length: 0 Connection: close Location: https://an.yandex.ru/mapuid/dmpsegmento/8bTMhvSUvgSm?sign=2012646411 P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information." Set-Cookie: userId=8bTMhvSUvgSm; Path=/; Domain=.rutarget.ru; Expires=Fri, 28 Jun 2024 23:36:47 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50026	213.239.194.43	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	698	OUT	GET /yandex/sync?session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cHM6Ly95YXN0YXRpYy5uZXQvIl19fQ HTTP/1.1 Host: sync.upravel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session_tptc=1704065807189
2023-12-31 23:36:48 UTC	850	IN	HTTP/1.1 302 Server: nginx Date: Sun, 31 Dec 2023 23:36:48 GMT Content-Type: image/png Content-Length: 0 Connection: close P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: user_id=bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c;SameSite=None;Secure;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 Set-Cookie: user_id-legacy=bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c;Version=1;Domain=.upravel.com;Path=/;Max-Age=315360000 Location: https://an.yandex.ru/mapuid/upravelis/bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range Access-Control-Expose-Headers: Content-Length,Content-Range Access-Control-Allow-Credentials: false

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50029	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	689	OUT	GET /mapuid/mtsdspis/6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:48 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:48 GMT Expires: Sun, 31 Dec 2023 23:36:48 GMT Last-Modified: Sun, 31 Dec 2023 23:36:48 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50028	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:47 UTC	847	OUT	GET /mapuid/adsniperis/75fb64d4-a835-11ee-86e0-002590c0647c HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:48 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:48 GMT Expires: Sun, 31 Dec 2023 23:36:48 GMT Last-Modified: Sun, 31 Dec 2023 23:36:48 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50030	45.9.24.193	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:48 UTC	583	OUT	GET /sync HTTP/1.1 Host: yandex-sync.rutarget.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:36:48 UTC	410	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Sun, 31 Dec 2023 23:36:48 GMT Content-Length: 0 Connection: close Location: https://an.yandex.ru/mapuid/rutargetis/3y1D5Vf4cNDE P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information." Set-Cookie: userId=3y1D5Vf4cNDE; Path=/; Domain=.rutarget.ru; Expires=Fri, 28 Jun 2024 23:36:48 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50027	188.42.105.236	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:48 UTC	625	OUT	GET /match/yandex?id=%5BbuyerUid%5D&chk=1 HTTP/1.1 Host: sync.gonet-ads.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chk=1
2023-12-31 23:36:48 UTC	486	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:48 GMT Content-Length: 0 Connection: close Location: https://an.yandex.ru/mapuid/gonetisnew/NDZlYTdiZjNhZTRmNGQ3Nw Set-Cookie: pid=NDZlYTdiZjNhZTRmNGQ3Nw; expires=Tue, 31 Dec 2024 23:36:48 GMT; domain=.gonet-ads.com; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50031	89.108.119.28	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:48 UTC	654	OUT	GET /0.gif?pid=YANDEX&bounce=1 HTTP/1.1 Host: x01.aidata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __upin=hE5fvW5C6phElzeLbqladQ; __upints=1704065807
2023-12-31 23:36:48 UTC	823	IN	HTTP/1.1 302 Found Server: nginx Date: Sun, 31 Dec 2023 23:36:48 GMT Content-Length: 0 Connection: close Location: https://an.yandex.ru/mapuid/dmpaidatame/hE5fvW5C6phElzeLbqladQ?sign=276513664 Set-Cookie: yaya=1;path=/;expires=Sun, 7 Jan 2024 23:36:48 GMT;max-age=604800;SameSite=None;Secure Expires: Sun, 31 Dec 2023 23:36:47 GMT Cache-Control: no-cache Access-Control-Allow-Methods: GET, POST Pragma: no-cache Cache-Control: no-store, must-revalidate, post-check=0, pre-check=0 Last-Modified: Sun, 31 Dec 2023 23:36:47 GMT Set-Cookie: __upin=hE5fvW5C6phElzeLbqladQ;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure Set-Cookie: __upints=1704065807;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50032	217.199.220.44	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:48 UTC	726	OUT	GET /rtb/sync/mts?u=6109ac2d-3456-4f35-bc9e-ff6acc68d7fa HTTP/1.1 Host: kimberlite.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: as=OFrH4WWR-wk; f=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsoltadspis%2FZZH7Ca1W1uM; n=1; u=ZZH7Ca1W1uM~q8RWLvAMdkdTezQk86fZXKmI25Q
2023-12-31 23:36:48 UTC	471	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Sun, 31 Dec 2023 23:36:48 GMT Content-Length: 0 Connection: close cache-control: no-store access-control-allow-credentials: true access-control-allow-origin: * location: https://an.yandex.ru/mapuid/soltadspis/ZZH7Ca1W1uM set-cookie: f=; max-age=0; samesite=none; httponly; secure set-cookie: n=; max-age=0; samesite=none; httponly; secure referrer-policy: no-referrer server-timing: app;srv=8;dur=0.0002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50033	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:48 UTC	840	OUT	GET /mapuid/dmpsegmento/8bTMhvSUvgSm?sign=2012646411 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:49 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:48 GMT Expires: Sun, 31 Dec 2023 23:36:48 GMT Last-Modified: Sun, 31 Dec 2023 23:36:48 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50034	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:48 UTC	846	OUT	GET /mapuid/upravelis/bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:49 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:49 GMT Expires: Sun, 31 Dec 2023 23:36:49 GMT Last-Modified: Sun, 31 Dec 2023 23:36:49 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50035	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:49 UTC	691	OUT	GET /mapuid/adsniperis/75fb64d4-a835-11ee-86e0-002590c0647c HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:49 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:49 GMT Expires: Sun, 31 Dec 2023 23:36:49 GMT Last-Modified: Sun, 31 Dec 2023 23:36:49 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50036	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:49 UTC	823	OUT	GET /mapuid/rutargetis/3y1D5Vf4cNDE HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:49 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:49 GMT Expires: Sun, 31 Dec 2023 23:36:49 GMT Last-Modified: Sun, 31 Dec 2023 23:36:49 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50037	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:49 UTC	781	OUT	GET /metrika/watch.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; sync_cookie_csrf=886343449fake; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:49 UTC	847	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 160624 Content-Type: application/javascript Date: Sun, 31 Dec 2023 23:36:49 GMT ETag: "658bd2fc-27370" Expires: Mon, 01 Jan 2024 00:36:49 GMT Last-Modified: Wed, 27 Dec 2023 07:32:12 GMT Set-Cookie: _yasc=Cp3zAYceF/BMKYFs92h60i8HpvkQ4g83iKh5591goficb5dTKMZjKqLvvXo0BwQj; domain=.yandex.ru; path=/; expires=Wed, 28 Dec 2033 23:36:49 GMT; secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2023-12-31 23:36:49 UTC	7341	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 65 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 79 28 77 69 6e 64 6f 77 2c 22 63 2e 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 77 29 7b 28 77 3d 6f 65 28 6b 2c 6c 2c 22 22 2c 77 29 28 6b 2c 6c 29 29 26 26 28 59 28 77 2e 74 68 65 6e 29 3f 77 2e 74 68 65 6e 28 67 29 3a 67 28 77 29 29 3b 72 65 74 75 72 6e 20 77 7d 66 75 6e 63 74 69 6f 6e 20 67 28 77 29 7b 77 26 26 28 59 28 77 29 3f 6d 2e 70 75 73 68 28 77 29 3a 6a 61 28 77 29 26 26 42 28 66 75 6e 63 74 69 6f 6e 28 41 29 7b 76 61 72 20 4d 3d 41 5b 30 5d 3b 41 3d 41 5b 31 5d 3b 59 28 41 29 26 26 28 22 75 22 3d 3d 3d 4d Data Ascii: (function(){try{(function(){function ne(a,b,c,d){var e=this;return y(window,"c.i",function(){function f(w){(w=oe(k,l,"",w)(k,l))&&(Y(w.then)?w.then(g):g(w));return w}function g(w){w&&(Y(w)?m.push(w):ja(w)&&B(function(A){var M=A[0];A=A[1];Y(A)&&("u"===M
2023-12-31 23:36:50 UTC	8168	IN	Data Raw: 74 43 6f 6e 74 65 6e 74 29 72 65 74 75 72 6e 20 63 2e 49 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 2c 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 79 6c 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3b 62 2e 4f 61 26 26 62 2e 55 61 26 26 28 62 2e 4f 61 3d 3d 3d 61 2e 4f 61 26 26 62 2e 55 61 3d 3d 3d 61 2e 55 61 7c 7c 44 28 61 2c 62 2c 7b 5a 3a 7b 7d 2c 47 62 3a 21 30 7d 29 2c 30 3c 65 26 26 6f 61 28 61 2e 68 61 2c 5b 65 5d 29 2c 42 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 2c 6b 2c 6c 3d 67 5b 30 5d 3b 67 3d 67 5b 31 5d 3b 76 61 72 20 6d 3d 2b 28 61 2e 5a 5b 6c 5d 26 26 61 2e 5a 5b 6c 5d 5b 67 5d 3f 61 2e 5a 5b 6c 5d 5b 67 5d 3a 30 29 3b 44 28 61 2e 5a 2c 28 68 3d 7b 7d 2c 68 5b 6c 5d 3d 28 6b 3d 7b 7d 2c 6b 5b 67 5d Data Ascii: tContent)return c.Ia.textContent=a,!0;return!1}function yl(a,b,c,d,e){var f;b.Oa&&b.Ua&&(b.Oa===a.Oa&&b.Ua===a.Ua\|\|D(a,b,{Z:{},Gb:!0}),0<e&&oa(a.ha,[e]),B(function(g){var h,k,l=g[0];g=g[1];var m=+(a.Z[l]&&a.Z[l][g]?a.Z[l][g]:0);D(a.Z,(h={},h[l]=(k={},k[g]
2023-12-31 23:36:50 UTC	8168	IN	Data Raw: 63 29 7b 68 2e 4c 63 3d 6b 3b 69 66 28 51 61 28 61 2c 67 2c 39 29 29 7b 61 3d 5b 5d 3b 62 72 65 61 6b 20 61 7d 47 28 67 2c 65 29 3b 47 28 67 2c 66 29 3b 47 28 67 2c 62 5b 30 5d 29 3b 47 28 67 2c 62 5b 31 5d 29 7d 69 66 28 6c 21 3d 3d 68 2e 73 69 7a 65 29 7b 68 2e 73 69 7a 65 3d 6c 3b 69 66 28 51 61 28 61 2c 67 2c 31 30 29 29 7b 61 3d 5b 5d 3b 62 72 65 61 6b 20 61 7d 47 28 67 2c 65 29 3b 47 28 67 2c 66 29 3b 47 28 67 2c 62 5b 32 5d 29 3b 47 28 67 2c 62 5b 33 5d 29 7d 69 66 28 67 2e 6c 65 6e 67 74 68 29 7b 61 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 61 3d 5b 5d 7d 6f 61 28 63 2c 61 29 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 47 64 28 61 2c 62 2c 63 29 7b 76 6f 69 64 20 30 3d 3d 3d 0a 63 26 26 28 63 3d 21 31 29 3b 69 66 28 21 62 29 72 65 74 75 72 Data Ascii: c){h.Lc=k;if(Qa(a,g,9)){a=[];break a}G(g,e);G(g,f);G(g,b[0]);G(g,b[1])}if(l!==h.size){h.size=l;if(Qa(a,g,10)){a=[];break a}G(g,e);G(g,f);G(g,b[2]);G(g,b[3])}if(g.length){a=g;break a}}a=[]}oa(c,a)}return d}function Gd(a,b,c){void 0===c&&(c=!1);if(!b)retur
2023-12-31 23:36:50 UTC	2435	IN	Data Raw: 2e 63 6c 6f 73 65 73 74 3d 74 28 61 2c 74 68 29 2c 65 2e 73 65 6c 65 63 74 3d 59 6d 2c 65 2e 67 65 74 44 61 74 61 3d 74 28 61 2c 75 68 29 2c 65 29 3b 6c 2e 62 75 74 74 6f 6e 3d 28 66 3d 7b 7d 2c 66 2e 63 6c 6f 73 65 73 74 3d 74 28 61 2c 71 64 29 2c 66 2e 73 65 6c 65 63 74 3d 54 65 2c 66 2e 67 65 74 44 61 74 61 3d 74 28 61 2c 72 64 29 2c 66 29 3b 6c 2e 70 68 6f 6e 65 3d 28 67 3d 7b 7d 2c 67 2e 68 69 64 65 50 68 6f 6e 65 73 3d 43 28 5b 61 2c 6e 75 6c 6c 2c 5b 64 5d 5d 2c 76 68 29 2c 67 29 3b 6c 2e 73 74 61 74 75 73 3d 28 68 3d 7b 7d 2c 68 2e 63 68 65 63 6b 53 74 61 74 75 73 3d 43 28 5b 61 2c 45 61 28 63 29 5d 2c 5a 6d 29 2c 68 29 3b 6b 2e 44 28 22 5f 75 22 2c 6c 29 3b 62 26 26 59 62 28 61 2c 7b 73 72 63 3a 62 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 77 68 28 61 Data Ascii: .closest=t(a,th),e.select=Ym,e.getData=t(a,uh),e);l.button=(f={},f.closest=t(a,qd),f.select=Te,f.getData=t(a,rd),f);l.phone=(g={},g.hidePhones=C([a,null,[d]],vh),g);l.status=(h={},h.checkStatus=C([a,Ea(c)],Zm),h);k.D("_u",l);b&&Yb(a,{src:b})}function wh(a
2023-12-31 23:36:50 UTC	5733	IN	Data Raw: 64 63 28 61 29 28 58 61 28 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 2c 64 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 65 3d 28 63 3d 7b 7d 2c 63 2e 61 74 74 72 69 62 75 74 65 73 3d 21 30 2c 63 2e 63 68 69 6c 64 4c 69 73 74 3d 21 30 2c 63 2e 73 75 62 74 72 65 65 3d 21 30 2c 63 29 3b 4d 61 28 22 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 2c 61 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 29 26 26 28 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 62 2e 54 29 29 2e 6f 62 73 65 72 76 65 28 64 2c 65 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 61 28 61 29 2e 46 28 61 2c 5b 22 6c 6f 61 64 22 5d 2c 62 2e 54 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 68 28 61 2c 62 2c 63 29 7b Data Ascii: dc(a)(Xa(I,function(){var c,d=a.document.body,e=(c={},c.attributes=!0,c.childList=!0,c.subtree=!0,c);Ma("MutationObserver",a.MutationObserver)&&(new MutationObserver(b.T)).observe(d,e)}))}function cn(a,b){return ba(a).F(a,["load"],b.T)}function zh(a,b,c){
2023-12-31 23:36:50 UTC	8168	IN	Data Raw: 62 29 3b 69 66 28 63 26 26 21 61 63 28 22 79 6d 2d 64 69 73 61 62 6c 65 2d 74 72 61 63 6b 6c 69 6e 6b 22 2c 63 29 29 7b 76 61 72 20 64 3d 61 2e 6c 2c 65 3d 61 2e 45 64 2c 66 3d 61 2e 43 61 2c 67 3d 61 2e 73 65 6e 64 65 72 2c 68 3d 61 2e 4a 64 2c 6b 3d 66 2e 6c 62 2c 6c 3d 63 2e 68 72 65 66 3b 76 61 72 20 6d 3d 63 62 28 63 2e 69 6e 6e 65 72 48 54 4d 4c 26 26 63 2e 69 6e 6e 65 72 48 54 4d 4c 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 3f 5b 5e 3e 5d 2b 3e 2f 67 69 2c 22 22 29 29 3b 6d 7c 7c 28 6d 3d 28 6d 3d 63 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 69 6d 67 22 29 29 3f 63 62 28 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 29 7c 7c 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 74 22 29 29 3a 22 22 29 3b 6d 3d 6c 3d 3d 3d 6d Data Ascii: b);if(c&&!ac("ym-disable-tracklink",c)){var d=a.l,e=a.Ed,f=a.Ca,g=a.sender,h=a.Jd,k=f.lb,l=c.href;var m=cb(c.innerHTML&&c.innerHTML.replace(/<\/?[^>]+>/gi,""));m\|\|(m=(m=c.querySelector("img"))?cb(m.getAttribute("title")\|\|m.getAttribute("alt")):"");m=l===m
2023-12-31 23:36:50 UTC	8168	IN	Data Raw: 2e 66 65 74 63 68 28 63 2b 22 3f 22 2b 65 63 28 66 29 2c 7b 6d 65 74 68 6f 64 3a 64 2e 42 62 2c 62 6f 64 79 3a 64 2e 52 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 21 31 3d 3d 3d 64 2e 6c 63 3f 22 6f 6d 69 74 22 3a 22 69 6e 63 6c 75 64 65 22 2c 68 65 61 64 65 72 73 3a 64 2e 7a 61 2c 73 69 67 6e 61 6c 3a 67 2e 73 69 67 6e 61 6c 7d 29 2c 6b 3d 74 28 64 2e 59 2c 4b 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 48 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 64 2e 76 61 26 26 58 63 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 67 2e 61 62 6f 72 74 28 29 7d 63 61 74 63 68 28 70 29 7b 7d 6d 28 6b 28 29 29 7d 2c 0a 64 2e 76 61 29 3b 72 65 74 75 72 6e 20 68 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 69 66 28 21 70 2e 6f 6b 29 7b 69 66 28 64 2e 57 62 29 Data Ascii: .fetch(c+"?"+ec(f),{method:d.Bb,body:d.R,credentials:!1===d.lc?"omit":"include",headers:d.za,signal:g.signal}),k=t(d.Y,Ka);return new H(function(l,m){d.va&&Xc(a,function(){try{g.abort()}catch(p){}m(k())},d.va);return h.then(function(p){if(!p.ok){if(d.Wb)
2023-12-31 23:36:50 UTC	8168	IN	Data Raw: 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 29 29 7c 7c 21 61 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 74 69 28 61 29 7b 72 65 74 75 72 6e 20 64 65 28 61 29 26 26 21 52 61 28 78 61 28 61 2e 74 79 70 65 29 2c 69 6f 29 3f 75 69 28 61 29 3f 21 61 2e 63 68 65 63 6b 65 64 3a 21 61 2e 76 61 6c 75 65 3a 6a 6f 28 61 29 3f 21 61 2e 76 61 6c 75 65 3a 6b 6f 28 61 29 3f 30 3e 61 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3a 0a 21 30 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 29 7b 69 66 28 61 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 6b 61 28 62 29 29 72 65 74 75 72 6e 20 62 3b 62 3d 61 2e 74 61 67 4e 61 6d 65 3b 69 66 28 6b 61 28 62 29 29 72 65 74 75 72 6e 20 Data Ascii: querySelectorAll"))\|\|!a.document.querySelectorAll)}function ti(a){return de(a)&&!Ra(xa(a.type),io)?ui(a)?!a.checked:!a.value:jo(a)?!a.value:ko(a)?0>a.selectedIndex:!0}function Za(a){if(a)try{var b=a.nodeName;if(ka(b))return b;b=a.tagName;if(ka(b))return
2023-12-31 23:36:50 UTC	5115	IN	Data Raw: 63 61 74 63 68 28 6b 29 7b 4a 64 28 61 2c 62 2c 6b 29 7d 72 65 74 75 72 6e 20 68 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 66 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 7c 7c 4d 69 28 61 29 2c 64 3d 63 5b 30 5d 3b 63 3d 63 5b 31 5d 3b 72 65 74 75 72 6e 21 69 73 4e 61 4e 28 64 29 26 26 59 28 63 29 3f 4d 61 74 68 2e 72 6f 75 6e 64 28 63 28 29 2b 64 29 3a 61 2e 44 61 74 65 2e 6e 6f 77 3f 61 2e 44 61 74 65 2e 6e 6f 77 28 29 3a 28 6e 65 77 20 61 2e 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 69 28 61 29 7b 61 3d 0a 51 63 28 61 29 3b 76 61 72 20 62 3d 6e 28 61 2c 22 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 29 2c 63 3d 6e 28 61 2c 22 6e 6f 77 22 29 3b 63 26 26 28 63 3d 53 28 63 2c 61 29 29 3b 72 65 74 75 72 6e Data Ascii: catch(k){Jd(a,b,k)}return h}}function tf(a,b){var c=b\|\|Mi(a),d=c[0];c=c[1];return!isNaN(d)&&Y(c)?Math.round(c()+d):a.Date.now?a.Date.now():(new a.Date).getTime()}function Mi(a){a=Qc(a);var b=n(a,"timing.navigationStart"),c=n(a,"now");c&&(c=S(c,a));return
2023-12-31 23:36:50 UTC	8168	IN	Data Raw: 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 3d 31 29 69 66 28 61 2e 63 61 6c 6c 28 62 2c 62 5b 63 5d 2c 63 29 29 72 65 74 75 72 6e 20 62 5b 63 5d 7d 66 75 6e 63 74 69 6f 6e 20 62 6a 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 41 66 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 61 28 64 2c 65 29 26 26 63 2e 70 75 73 68 28 64 29 3b 72 65 74 75 72 6e 20 63 7d 2c 5b 5d 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 48 64 28 61 2c 0a 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 59 6f 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4b 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 63 3f 21 21 61 28 64 2c 65 29 3a 21 31 7d 2c 21 30 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 61 2c 62 2c 63 29 Data Ascii: (var c=0;c<b.length;c+=1)if(a.call(b,b[c],c))return b[c]}function bj(a,b){return Af(function(c,d,e){a(d,e)&&c.push(d);return c},[],b)}function Hd(a,b,c){return c?a:b}function Yo(a,b){return K(function(c,d,e){return c?!!a(d,e):!1},!0,b)}function Ze(a,b,c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50038	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:49 UTC	833	OUT	GET /mapuid/gonetisnew/NDZlYTdiZjNhZTRmNGQ3Nw HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:49 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:49 GMT Expires: Sun, 31 Dec 2023 23:36:49 GMT Last-Modified: Sun, 31 Dec 2023 23:36:49 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50039	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:49 UTC	849	OUT	GET /mapuid/dmpaidatame/hE5fvW5C6phElzeLbqladQ?sign=276513664 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:50 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:49 GMT Expires: Sun, 31 Dec 2023 23:36:49 GMT Last-Modified: Sun, 31 Dec 2023 23:36:49 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50040	213.180.204.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:49 UTC	790	OUT	GET /mapuid/soltadspis/ZZH7Ca1W1uM HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:36:50 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:50 GMT Expires: Sun, 31 Dec 2023 23:36:50 GMT Last-Modified: Sun, 31 Dec 2023 23:36:50 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50041	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:49 UTC	684	OUT	GET /mapuid/dmpsegmento/8bTMhvSUvgSm?sign=2012646411 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:50 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:50 GMT Expires: Sun, 31 Dec 2023 23:36:50 GMT Last-Modified: Sun, 31 Dec 2023 23:36:50 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50042	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:50 UTC	690	OUT	GET /mapuid/upravelis/bc79bfdf-65fb-4e87-8fb3-a9b01a5ab37c HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:50 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:50 GMT Expires: Sun, 31 Dec 2023 23:36:50 GMT Last-Modified: Sun, 31 Dec 2023 23:36:50 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50043	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:50 UTC	667	OUT	GET /mapuid/rutargetis/3y1D5Vf4cNDE HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:50 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:50 GMT Expires: Sun, 31 Dec 2023 23:36:50 GMT Last-Modified: Sun, 31 Dec 2023 23:36:50 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50044	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:50 UTC	677	OUT	GET /mapuid/gonetisnew/NDZlYTdiZjNhZTRmNGQ3Nw HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:50 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:50 GMT Expires: Sun, 31 Dec 2023 23:36:50 GMT Last-Modified: Sun, 31 Dec 2023 23:36:50 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50045	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:50 UTC	693	OUT	GET /mapuid/dmpaidatame/hE5fvW5C6phElzeLbqladQ?sign=276513664 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:51 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:51 GMT Expires: Sun, 31 Dec 2023 23:36:51 GMT Last-Modified: Sun, 31 Dec 2023 23:36:51 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50046	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:50 UTC	666	OUT	GET /mapuid/soltadspis/ZZH7Ca1W1uM HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:36:51 UTC	454	IN	HTTP/1.1 200 OK Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:51 GMT Expires: Sun, 31 Dec 2023 23:36:51 GMT Last-Modified: Sun, 31 Dec 2023 23:36:51 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:36:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50048	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:51 UTC	1842	OUT	GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A228187864810%3Ahid%3A794577329%3Az%3A60%3Ai%3A20240101003650%3Aet%3A1704065810%3Ac%3A1%3Arn%3A103385644%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Ast%3A1704065810&t=clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yastatic.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
2023-12-31 23:36:52 UTC	811	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://yastatic.net Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:51 GMT Expires: Sun, 31-Dec-2023 23:36:51 GMT Last-Modified: Sun, 31-Dec-2023 23:36:51 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:52 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 4d 38 71 76 77 31 48 52 5a 38 58 64 39 69 32 30 72 42 4e 72 30 47 62 30 67 45 70 62 7a 45 74 4c 65 65 6d 35 6c 62 45 7a 4a 6a 4b 4d 64 4b 77 67 75 41 33 70 77 49 50 44 6f 4e 30 57 74 69 61 4a 22 2c 20 22 62 22 3a 22 57 5a 75 73 76 6b 4b 68 7a 65 6f 59 72 59 2b 41 51 69 4a 59 4b 39 47 4b 56 6f 66 52 75 6e 54 4c 47 70 4e 56 6b 4a 61 45 53 70 6f 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 31 31 5f 34 33 65 61 61 64 37 61 36 62 31 37 36 66 63 38 61 38 35 61 61 30 65 31 30 37 36 35 30 39 65 39 35 66 32 30 61 38 35 32 32 66 31 62 34 34 66 37 32 65 38 65 33 31 64 66 32 62 37 61 61 30 65 38 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"M8qvw1HRZ8Xd9i20rBNr0Gb0gEpbzEtLeem5lbEzJjKMdKwguA3pwIPDoN0WtiaJ", "b":"WZusvkKhzeoYrY+AQiJYK9GKVofRunTLGpNVkJaESpo="},"eu":2,"hittoken":"1704065811_43eaad7a6b176fc8a85aa0e1076509e95f20a8522f1b44f72e8e31df2b7aa0e8"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50047	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:51 UTC	1262	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
2023-12-31 23:36:52 UTC	828	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:36:51 GMT ETag: "65898a2e-2b" Expires: Mon, 01 Jan 2024 00:36:51 GMT Last-Modified: Mon, 25 Dec 2023 13:57:02 GMT Set-Cookie: _yasc=Ey/7VfiOK2ruEADvpWzHDx3P/GhljFo9I0pIA8GYINC8EfgyYVYWTO4GviIj9rkc; domain=.yandex.com; path=/; expires=Wed, 28 Dec 2033 23:36:51 GMT; secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2023-12-31 23:36:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50049	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:52 UTC	1720	OUT	GET /watch/3?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A228187864810%3Ahid%3A794577329%3Az%3A60%3Ai%3A20240101003650%3Aet%3A1704065810%3Ac%3A1%3Arn%3A103385644%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Ast%3A1704065810&t=clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
2023-12-31 23:36:53 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:53 GMT Expires: Sun, 31-Dec-2023 23:36:53 GMT Last-Modified: Sun, 31-Dec-2023 23:36:53 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:53 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 33 41 35 30 63 64 6f 6c 74 64 6c 33 6d 48 47 6a 35 46 4e 58 59 79 48 32 77 36 36 74 4e 6b 47 59 4a 6b 41 7a 4e 33 76 48 73 66 6a 31 30 47 6b 70 45 35 39 74 43 52 68 73 6c 48 75 2f 42 79 44 68 22 2c 20 22 62 22 3a 22 42 2f 34 55 61 43 68 6c 61 55 57 6a 69 4f 43 7a 6c 2b 63 51 4d 66 63 79 7a 41 6d 5a 48 48 45 6f 6a 4d 6d 79 5a 71 6d 30 6b 4c 4d 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 31 33 5f 37 38 65 39 62 65 62 38 32 39 65 35 35 64 30 30 30 61 31 30 34 35 66 63 33 66 62 31 38 32 64 30 63 31 35 35 66 37 64 31 35 33 65 62 33 62 30 66 36 38 36 33 66 39 38 30 37 37 62 37 61 35 65 61 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"3A50cdoltdl3mHGj5FNXYyH2w66tNkGYJkAzN3vHsfj10GkpE59tCRhslHu/ByDh", "b":"B/4UaChlaUWjiOCzl+cQMfcyzAmZHHEojMmyZqm0kLM="},"eu":2,"hittoken":"1704065813_78e9beb829e55d000a1045fc3fb182d0c155f7d153eb3b0f6863f98077b7a5ea"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50050	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:53 UTC	1373	OUT	GET /metrika/metrika_match.html HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
2023-12-31 23:36:54 UTC	835	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 1916 Content-Type: text/html Date: Sun, 31 Dec 2023 23:36:54 GMT ETag: "65898a2e-77c" Expires: Mon, 01 Jan 2024 00:36:54 GMT Last-Modified: Mon, 25 Dec 2023 13:57:02 GMT Set-Cookie: _yasc=n5qjQu8a+1Yz3gMIac/LApOb1XhE37NXSX8mzzExr56bN2oRDWleBvtKdUu5yBpVww==; domain=.yandex.com; path=/; expires=Wed, 28 Dec 2033 23:36:54 GMT; secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2023-12-31 23:36:54 UTC	1916	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8"></head><body><scrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50051	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:54 UTC	2634	OUT	GET /watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22b%22%3A%22%22%2C%22browser%22%3A%22chrome%22%2C%22extensions%22%3A%22%22%2C%22fresh%22%3A%220%22%2C%22fromCancel%22%3A%22false%22%2C%22fromGoogle%22%3A%22false%22%2C%22infected%22%3A%22%22%2C%22loyal%22%3A%220%22%2C%22old%22%3A%22actual%22%2C%22os%22%3A%22windows%22%2C%22p%22%3A%22%22%2C%22sbscrb%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22winxp%22%3A%22%22%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1358133347124%3Ahid%3A794577329%3Aphid%3A1042935619%3Az%3A60%3Ai%3A20240101003653%3Aet%3A1704065813%3Ac%3A1%3Arn%3A1021585331%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1704065813%3At%3A&t=gdpr(6)clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yastatic.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciGgUieDg2IiIQIjExNy4wLjU5MzguMTMyIioCPzA6CSJXaW5kb3dzIkIIIjEwLjAuMCJKBCI2NCJSWyJHb29nbGUgQ2hyb21lIjt2PSIxMTcuMC41OTM4LjEzMiIsIk5vdDtBPUJyYW5kIjt2PSI4LjAuMC4wIiwiQ2hyb21pdW0iO3Y9IjExNy4wLjU5MzguMTMyIiI=
2023-12-31 23:36:55 UTC	1202	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://yastatic.net Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 439 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:55 GMT Expires: Sun, 31-Dec-2023 23:36:55 GMT Last-Modified: Sun, 31-Dec-2023 23:36:55 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:36:55 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:55 UTC	439	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 31 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 34 2d 31 33 20 31 31 3a 30 37 3a 33 35 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 30 2e 30 30 30 31 30 22 2c 22 75 72 6c 73 22 3a 22 72 65 67 65 78 70 3a 2e 2a 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 6d 67 4a 4f 43 5a 76 50 56 6e 54 56 68 54 77 45 57 4c 42 49 6a 35 75 78 31 37 4a 79 38 67 58 6b 4b 34 78 2f 79 57 7a 70 53 54 2f 46 32 65 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"1","webvisor":{"arch_type":"none","date":"2022-04-13 11:07:35","forms":1,"recp":"0.00010","urls":"regexp:.*"},"sbp": {"a":"mgJOCZvPVnTVhTwEWLBIj5ux17Jy8gXkK4x/yWzpST/F2e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50052	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:36:55 UTC	2508	OUT	GET /watch/37412095?wmode=7&page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&page-ref=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22b%22%3A%22%22%2C%22browser%22%3A%22chrome%22%2C%22extensions%22%3A%22%22%2C%22fresh%22%3A%220%22%2C%22fromCancel%22%3A%22false%22%2C%22fromGoogle%22%3A%22false%22%2C%22infected%22%3A%22%22%2C%22loyal%22%3A%220%22%2C%22old%22%3A%22actual%22%2C%22os%22%3A%22windows%22%2C%22p%22%3A%22%22%2C%22sbscrb%22%3A%22%22%2C%22slow%22%3A%22%22%2C%22winxp%22%3A%22%22%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1358133347124%3Ahid%3A794577329%3Aphid%3A1042935619%3Az%3A60%3Ai%3A20240101003653%3Aet%3A1704065813%3Ac%3A1%3Arn%3A1021585331%3Arqn%3A1%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Ads%3A130%2C571%2C646%2C237%2C637%2C0%2C%2C7%2C0%2C%2C%2C%2C3146%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1704065788005%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1704065813%3At%3A&t=gdpr(6)clc(0-0-0)rqnt(1)aw(1)rcm(1)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:36:56 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 439 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:36:56 GMT Expires: Sun, 31-Dec-2023 23:36:56 GMT Last-Modified: Sun, 31-Dec-2023 23:36:56 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:36:56 UTC	439	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 31 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 34 2d 31 33 20 31 31 3a 30 37 3a 33 35 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 30 2e 30 30 30 31 30 22 2c 22 75 72 6c 73 22 3a 22 72 65 67 65 78 70 3a 2e 2a 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 7a 51 33 71 47 37 42 77 48 57 78 67 78 55 44 30 43 47 67 6c 50 56 63 45 61 71 68 6f 62 6a 74 6d 45 35 4b 63 4f 69 68 73 69 4b 45 2b 5a 68 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"1","webvisor":{"arch_type":"none","date":"2022-04-13 11:07:35","forms":1,"recp":"0.00010","urls":"regexp:.*"},"sbp": {"a":"zQ3qG7BwHWxgxUD0CGglPVcEaqhobjtmE5KcOihsiKE+Zh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50054	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:01 UTC	761	OUT	GET /kak-najti-svoyu-biblioteku-v-steam/ HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: quads_browser_width=1280; _ym_uid=1704065783133633243; _ym_d=1704065783; _ym_isad=1
2023-12-31 23:37:03 UTC	640	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:37:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: _ym_uid=1704065783133633243; expires=Mon, 30-Dec-2024 23:37:02 GMT; Max-Age=31536000; path=/; domain=.faq-kak.ru; secure Set-Cookie: _ym_d=1704065822; expires=Mon, 30-Dec-2024 23:37:02 GMT; Max-Age=31536000; path=/; domain=.faq-kak.ru; secure X-UA-Compatible: IE=edge Link: <https://faq-kak.ru/wp-json/>; rel="https://api.w.org/" Link: <https://faq-kak.ru/wp-json/wp/v2/posts/112659>; rel="alternate"; type="application/json" Vary: Accept-Encoding
2023-12-31 23:37:03 UTC	15744	IN	Data Raw: 66 64 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 72 75 2d 52 55 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 71 2d 6b 61 6b 2e 72 75 2f 78 6d 6c 72 70 63 2e 70 68 70 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 Data Ascii: fd9a<!DOCTYPE html><html class="html" lang="ru-RU" prefix="og: https://ogp.me/ns#"><head><meta charset="UTF-8"><link rel="profile" href="https://gmpg.org/xfn/11"><link rel="pingback" href="https://faq-kak.ru/xmlrpc.php"><meta name="viewport" c
2023-12-31 23:37:03 UTC	16384	IN	Data Raw: 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 Data Ascii: preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-b
2023-12-31 23:37:03 UTC	16384	IN	Data Raw: 2d 36 34 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 71 2d 6b 61 6b 2e 72 75 2f 6f 2d 73 61 79 74 65 2f 22 3e d0 9e 20 d1 81 d0 b0 d0 b9 d1 82 d0 b5 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 36 31 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 71 2d 6b 61 6b 2e 72 75 2f 25 64 30 25 62 61 25 64 30 25 62 65 25 64 30 25 62 64 25 64 31 25 38 32 25 64 30 25 62 30 25 64 30 25 62 61 25 64 31 25 38 32 25 64 31 25 38 62 2f 22 3e d0 9a d0 be d0 bd d1 82 d0 b0 d0 ba d1 82 d1 8b 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c Data Ascii: -64"><a href="https://faq-kak.ru/o-sayte/"> </a></li><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-61"><a href="https://faq-kak.ru/%d0%ba%d0%be%d0%bd%d1%82%d0%b0%d0%ba%d1%82%d1%8b/"></a></li><l
2023-12-31 23:37:03 UTC	16384	IN	Data Raw: 22 20 6f 6e 45 72 72 6f 72 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 20 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 3d 20 77 69 6e 64 6f 77 2e 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 20 77 70 5f 62 72 6f 6b 65 6e 5f 69 6d 61 67 65 73 28 74 68 69 73 29 3b 22 20 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 43 73 76 67 25 32 30 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 25 32 30 76 69 65 77 42 6f 78 3d 27 30 25 32 30 30 25 32 30 30 25 32 30 30 27 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 20 64 61 74 61 2d 6c 61 7a 79 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 61 6b 61 6d 61 69 2e Data Ascii: " onError="javascript: wp_broken_images = window.wp_broken_images \|\| function(){}; wp_broken_images(this);" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%200%200'%3E%3C/svg%3E" data-lazy-src="https://avatars.akamai.
2023-12-31 23:37:03 UTC	16384	IN	Data Raw: d0 b5 d0 bd d0 b8 d1 8f 20 d1 8d d1 82 d0 be d0 b9 20 d0 b8 d0 b3 d1 80 d1 8b 2e 3c 2f 70 3e 0a 0d 0a 31 35 63 30 64 0d 0a 3c 70 3e d0 92 20 d1 8d d1 82 d0 be d0 bc 20 d1 80 d0 b0 d0 b7 d0 b4 d0 b5 d0 bb d0 b5 20 d0 b1 d1 83 d0 b4 d1 83 d1 82 20 d0 bf d0 be d0 ba d0 b0 d0 b7 d0 b0 d0 bd d1 8b 20 d0 bd d0 b5 d0 b4 d0 b0 d0 b2 d0 bd d0 be 20 d0 b7 d0 b0 d0 bf d1 83 d1 89 d0 b5 d0 bd d0 bd d1 8b d0 b5 20 d0 b8 d0 bb d0 b8 20 d0 bf d1 80 d0 b8 d0 be d0 b1 d1 80 d0 b5 d1 82 d1 91 d0 bd d0 bd d1 8b d0 b5 20 d0 b8 d0 b3 d1 80 d1 8b 2e 20 d0 9f d1 80 d0 be d1 81 d1 82 d0 be 20 d0 bd d0 b0 d0 b6 d0 bc d0 b8 d1 82 d0 b5 20 d0 bd d0 b0 20 d0 b1 d0 be d0 bb d1 8c d1 88 d1 83 d1 8e 20 d0 b7 d0 b5 d0 bb d1 91 d0 bd d1 83 d1 8e 20 d0 ba d0 bd d0 be d0 bf d0 ba d1 83 2c Data Ascii: .</p>15c0d<p> . ,
2023-12-31 23:37:04 UTC	16384	IN	Data Raw: d1 82 d0 b0 d0 ba 20 d0 ba d0 b0 d0 ba 20 d0 ba d0 be d0 bc d0 bf d0 b0 d0 bd d0 b8 d1 8f 20 56 61 6c 76 65 20 d0 bd d0 b5 20 d1 82 d0 be d1 80 d0 be d0 bf d0 b8 d1 82 d1 81 d1 8f 20 d0 b7 d0 b0 d0 bd d0 b8 d0 bc d0 b0 d1 82 d1 8c d1 81 d1 8f 20 d0 bf d0 be d0 b4 d0 be d0 b1 d0 bd d1 8b d0 bc d0 b8 20 d0 bc d0 b5 d0 bb d0 be d1 87 d0 b0 d0 bc d0 b8 2c 20 d0 b7 d0 b0 20 d0 bd d0 b8 d1 85 20 d1 80 d0 b0 d0 b1 d0 be d1 82 d0 b0 d1 8e d1 82 20 d0 bd d0 b0 d1 88 d0 b8 20 d0 b2 d0 b5 d1 80 d0 bd d1 8b d0 b5 20 d0 b8 d0 bd d0 be d1 81 d1 82 d1 80 d0 b0 d0 bd d0 bd d1 8b d0 b5 20 d0 b4 d1 80 d1 83 d0 b7 d1 8c d1 8f 2c 20 d0 ba d0 be d1 82 d0 be d1 80 d1 8b d0 b5 20 d1 83 d1 81 d0 bf d0 b5 d1 88 d0 bd d0 be 20 d1 81 d0 be d0 b7 d0 b4 d0 b0 d1 8e d1 82 20 d1 80 d0 Data Ascii: Valve , ,
2023-12-31 23:37:04 UTC	16384	IN	Data Raw: 2f 73 76 67 27 25 32 30 76 69 65 77 42 6f 78 3d 27 30 25 32 30 30 25 32 30 39 30 30 25 32 30 35 30 30 27 25 33 45 25 33 43 2f 73 76 67 25 33 45 22 20 61 6c 74 20 64 61 74 61 2d 6c 61 7a 79 2d 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 77 69 6e 64 6f 77 73 72 65 70 6f 72 74 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 32 2f 30 31 2f 55 6e 74 69 74 6c 65 64 2d 64 65 73 69 67 6e 2d 32 30 32 32 2d 30 31 2d 32 38 54 31 32 31 36 35 34 2e 33 38 37 2d 31 2d 31 2d 31 2e 70 6e 67 22 20 2f 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 69 6d 67 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 64 65 63 6f 64 69 6e 67 3d 22 61 73 79 6e 63 22 20 6f 6e 45 72 72 6f 72 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 20 77 70 5f 62 72 6f 6b 65 6e 5f Data Ascii: /svg'%20viewBox='0%200%20900%20500'%3E%3C/svg%3E" alt data-lazy-src="https://cdn.windowsreport.com/wp-content/uploads/2022/01/Untitled-design-2022-01-28T121654.387-1-1-1.png" /><noscript><img loading="lazy" decoding="async" onError="javascript: wp_broken_
2023-12-31 23:37:04 UTC	16384	IN	Data Raw: 20 20 20 20 20 61 73 79 6e 63 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 0d 0a 20 20 20 20 20 20 20 20 73 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 73 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 2e 73 72 63 20 3d 20 22 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 73 79 73 74 65 6d 2f 63 6f 6e 74 65 78 74 2e 6a 73 22 3b 0d 0a 20 20 20 20 20 20 20 20 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0d 0a 20 20 Data Ascii: async: true }); }); t = d.getElementsByTagName("script")[0]; s = d.createElement("script"); s.type = "text/javascript"; s.src = "//an.yandex.ru/system/context.js"; s.async = true;
2023-12-31 23:37:04 UTC	16384	IN	Data Raw: 2e 72 75 2f 71 75 65 73 74 69 6f 6e 2f 39 38 31 30 35 37 33 38 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e d0 98 d1 81 d1 82 d0 be d1 87 d0 bd d0 b8 d0 ba 3c 2f 61 3e 3c 2f 64 69 76 3e 0a 3c 2f 70 3e 0a 3c 21 2d 2d 20 57 50 20 51 55 41 44 53 20 43 6f 6e 74 65 6e 74 20 41 64 20 50 6c 75 67 69 6e 20 76 2e 20 32 2e 30 2e 37 39 2e 31 20 2d 2d 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 71 75 61 64 73 2d 6c 6f 63 61 74 69 6f 6e 20 71 75 61 64 73 2d 61 64 32 31 33 33 30 38 20 22 20 69 64 3d 22 71 75 61 64 73 2d 61 64 32 31 33 33 30 38 22 20 73 74 79 6c 65 3d 22 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 70 78 20 33 70 78 20 33 70 78 20 33 70 78 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 30 70 78 20 Data Ascii: .ru/question/98105738" rel="noopener" target="_blank"></a></div></p>... WP QUADS Content Ad Plugin v. 2.0.79.1 --><div class="quads-location quads-ad213308 " id="quads-ad213308" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px
2023-12-31 23:37:04 UTC	7229	IN	Data Raw: 74 65 72 2d 62 6f 74 74 6f 6d 20 2d 2d 3e 0a 0a 0a 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 20 2d 2d 3e 0a 0a 09 0a 3c 2f 66 6f 6f 74 65 72 3e 3c 21 2d 2d 20 23 66 6f 6f 74 65 72 20 2d 2d 3e 0a 0d 0a 09 0d 0a 09 0d 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 77 72 61 70 20 2d 2d 3e 0d 0a 0d 0a 0d 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 6f 75 74 65 72 2d 77 72 61 70 20 2d 2d 3e 0d 0a 0d 0a 0d 0a 0a 3c 61 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 d0 9f d0 b5 d1 80 d0 b5 d0 b9 d1 82 d0 b8 20 d0 bd d0 b0 d0 b2 d0 b5 d1 80 d1 85 20 d1 81 d1 82 d1 80 d0 b0 d0 bd d0 b8 d1 86 d1 8b 22 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 73 63 72 6f 6c 6c 2d 74 6f 70 22 20 63 6c 61 73 73 3d 22 73 63 72 6f 6c 6c 2d 74 6f 70 2d 72 69 67 68 74 22 3e 3c Data Ascii: ter-bottom --></div>... #footer-inner --></footer>... #footer --></div>... #wrap --></div>... #outer-wrap --><a aria-label=" " href="#" id="scroll-top" class="scroll-top-right"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50055	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:05 UTC	2768	OUT	GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003703%3Aet%3A1704065824%3Ac%3A1%3Arn%3A72148332%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C566%2C1934%2C553%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065820463%3Afp%3A2678%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065824%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:05 UTC	1200	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 427 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:05 GMT Expires: Sun, 31-Dec-2023 23:37:05 GMT Last-Modified: Sun, 31-Dec-2023 23:37:05 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:05 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:05 UTC	427	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 51 6f 2f 4d 6e 43 4f 31 61 59 4b 48 55 34 46 39 75 75 6e 43 46 61 4b 53 46 77 6c 2b 6c 43 55 47 46 34 34 76 6f 49 67 68 47 48 7a 46 4a 6f 41 6c 69 54 45 48 52 32 57 4f 51 4e 61 77 66 2b 36 75 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"Qo/MnCO1aYKHU4F9uunCFaKSFwl+lCUGF44voIghGHzFJoAliTEHR2WOQNawf+6u"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50058	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:05 UTC	10730	OUT	GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2FWempCLkIbzZwUHPjhEF8mIz2l90AhwORk3zANoqzOXloYacFIxLo6STzBCAObeahMyaQ6RoCmaLkxdjigDA5Ze8mNzBenLhUeQVNRpwbW6FT%2BucqF%2FH310Zam7CGyf02nfihF2f2DgK1TcmRUNwWPvCYsVjxsSnNVaf2uvH%2FNNPraex4n8BfrO4OM4ms50SyublR9w%2B77d3j5nF3f6fe3eze%2FWvzy812vn4Is%2Fzx%2Brbeny40G4BOF3tyrD3siaMt%2FHRDdA7EUl%2F5ZgrMBW2oPJeEfjZ1K6tWIfkg3SgM8qc1ehTgfULS66IZQTO0gpyhIhh%2F7V2m2RyoBH6BLsP97hd1Q6RefrhnQpgVdAjssKy7sOWn71hLOXZnsi8NbPXqi0OUnZDCK%2Bam%2BjCFoj9I675fceCcYVzWgvROrQGmkR9NV26EXir%2FzKWRn6dHr89eBmry52%2BH3nNXTB0KOfxjgAQfYS%2BF9NTy7Bw1efkkCklZ8WvFBt2Yz%2BgxsPHtxcz0J8CWG0buBXPfq%2BQBiLFDevRkrYlPSwwBWtRIa8lOZp93jzdzR6SZvdg0i6OI%2FN8sgyyx9zMnVaiPoi9nqY418Npa343YIcGJCpQVJX96qpnpw%2Fb9k6PML4yuWAmuBDkiWXcywZ6sm%2BVBbo113wf%2FAYt05fN68WlnC4NwLmgOV51Gds5742yCBPPEDie2Oa9GckWZVUHuIOAIvN92seI4XZp4%2FATzDTDPzLykSPnDyc1inOoB9ut%2FAU19AWg%3D&pcode-icookie=ov0pI87eXrcREkH0lgvJEedIFAWRizuGVD%2BBgeQGBJgX1jC7e8ft0flwyvzyBFUtIQbeSUQUVH%2BiozgIAXTI1X64o5o%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=1&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=2757811704065824348&target-id=42019029&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A347%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B6058876922672%5D HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:37:06 UTC	814	IN	HTTP/1.1 200 Ok Connection: Close Content-Type: application/json Transfer-Encoding: chunked X-Yandex-Req-Id: 1704065826295589-576294603272777157900176-production-app-host-sas-pcode-558 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:06 GMT expires: Sun, 31 Dec 2023 23:37:06 GMT last-modified: Sun, 31 Dec 2023 23:37:06 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=an.yandex.ru; path=/; expires=Sun, 07-Jan-2024 23:37:06 GMT; SameSite=None; Secure ssr: true strict-transport-security: max-age=31536000 timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:37:06 UTC	3961	IN	Data Raw: 46 37 32 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 36 35 37 33 35 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 35 38 39 35 36 35 38 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 Data Ascii: F72{"impressionData":{"currency":"RUB","revenueUSD":"0.000065735","precision":"estimated","revenue":"0.005895658"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"78362
2023-12-31 23:37:06 UTC	3413	IN	Data Raw: 44 34 45 0d 0a 5d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 73 22 3a 7b 22 72 69 67 68 74 22 3a 22 23 46 46 37 34 35 37 46 46 22 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 35 33 39 30 34 33 34 2f 42 6a 5a 64 49 70 74 4a 34 73 44 58 39 43 2d 70 6d 6c 65 4a 30 41 2f 79 39 30 22 2c 22 39 30 22 2c 22 39 30 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 46 44 37 45 35 34 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 44 37 36 42 34 37 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 30 30 30 30 30 30 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 52 69 67 68 74 22 3a 22 23 46 46 37 34 35 37 46 46 22 Data Ascii: D4E],"backgroundColors":{"right":"#FF7457FF"}}],["https://avatars.mds.yandex.net/get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/y90","90","90",{"ColorWizBack":"#FD7E54","ColorWizButton":"#D76B47","ColorWizButtonText":"#000000","ColorWizBackRight":"#FF7457FF"
2023-12-31 23:37:06 UTC	1478	IN	Data Raw: 35 42 46 0d 0a 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 31 33 35 2c 22 68 22 3a 31 38 30 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 31 38 30 2c 22 68 22 3a 31 33 35 7d 5d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 73 22 3a 7b 22 72 69 67 68 74 22 3a 22 23 46 46 37 34 35 37 46 46 22 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 35 33 39 30 34 33 34 2f 42 6a 5a 64 49 70 74 4a 34 73 44 58 39 43 2d 70 6d 6c 65 4a 30 41 2f 79 39 30 30 22 2c 22 39 30 30 22 2c 22 39 30 30 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 46 44 37 45 35 34 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 44 37 36 42 34 37 22 Data Ascii: 5BF,{"x":0,"y":0,"w":135,"h":180},{"x":0,"y":0,"w":180,"h":135}],"backgroundColors":{"right":"#FF7457FF"}}],["https://avatars.mds.yandex.net/get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/y900","900","900",{"ColorWizBack":"#FD7E54","ColorWizButton":"#D76B47"
2023-12-31 23:37:06 UTC	6697	IN	Data Raw: 31 41 32 31 0d 0a 39 30 2c 22 68 22 3a 33 31 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 36 37 2c 22 68 22 3a 39 30 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 39 30 2c 22 68 22 3a 36 37 7d 5d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 73 22 3a 7b 22 72 69 67 68 74 22 3a 22 23 46 46 37 34 35 37 46 46 22 7d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 35 33 39 30 34 33 34 2f 42 6a 5a 64 49 70 74 4a 34 73 44 58 39 43 2d 70 6d 6c 65 4a 30 41 2f 78 36 30 30 22 2c 22 36 30 30 22 2c 22 36 30 30 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 46 44 37 45 35 34 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 Data Ascii: 1A2190,"h":31},{"x":0,"y":0,"w":67,"h":90},{"x":0,"y":0,"w":90,"h":67}],"backgroundColors":{"right":"#FF7457FF"}}],["https://avatars.mds.yandex.net/get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/x600","600","600",{"ColorWizBack":"#FD7E54","ColorWizButton":"#
2023-12-31 23:37:06 UTC	1486	IN	Data Raw: 35 43 37 0d 0a 30 64 45 76 46 61 66 2d 47 61 76 6b 6e 57 6b 32 64 4d 74 63 35 41 68 4d 57 42 6c 51 4a 6c 39 54 78 75 49 55 4d 36 58 47 45 65 73 4a 6e 35 6c 44 5f 7e 32 3f 61 63 74 69 6f 6e 2d 69 64 3d 33 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 74 72 61 63 6b 69 6e 67 2f 57 56 79 65 6a 49 5f 7a 4f 6f 56 58 32 4c 62 63 30 4f 71 46 30 44 44 53 52 58 76 34 65 6d 54 48 31 69 37 61 6b 77 6e 75 43 54 69 56 36 78 62 57 78 4a 4a 4d 78 39 48 66 56 4f 55 79 72 37 56 36 39 66 76 65 51 4d 62 66 51 4d 64 66 78 46 30 76 50 37 69 51 62 54 78 4a 76 Data Ascii: 5C70dEvFaf-GavknWk2dMtc5AhMWBlQJl9TxuIUM6XGEesJn5lD_~2?action-id=3...</Tracking>\n <Tracking event=\"complete\"><![CDATA[https://an.yandex.ru/tracking/WVyejI_zOoVX2Lbc0OqF0DDSRXv4emTH1i7akwnuCTiV6xbWxJJMx9HfVOUyr7V69fveQMbfQMdfxF0vP7iQbTxJv
2023-12-31 23:37:06 UTC	677	IN	Data Raw: 32 39 45 0d 0a 51 5f 48 4b 6b 75 6d 6c 33 79 62 6a 50 72 64 4e 34 39 4c 6e 59 55 72 5f 65 70 47 49 51 38 50 50 5f 35 4f 43 52 70 57 63 66 77 4f 5a 4e 63 54 55 51 43 63 33 61 47 62 61 6c 77 6e 64 41 62 4b 67 63 71 7a 6c 31 49 57 34 72 56 62 4e 7a 36 4d 58 49 44 4b 67 62 4b 31 57 5f 79 30 6e 4a 5a 6c 55 6a 54 42 65 36 4a 56 68 5a 72 70 74 33 30 64 45 76 46 61 66 2d 47 61 76 6b 6e 57 6b 32 64 4d 74 63 35 41 68 4d 57 42 6c 51 4a 6c 39 54 78 75 49 55 4d 36 58 47 45 65 73 4a 6e 35 6c 44 5f 7e 32 3f 61 63 74 69 6f 6e 2d 69 64 3d 35 5d 5d 3e 3c 2f 54 72 61 63 6b 69 6e 67 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 54 72 61 63 6b 69 6e 67 20 65 76 65 6e 74 3d 5c 22 75 6e 6d 75 74 65 5c 22 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 Data Ascii: 29EQ_HKkuml3ybjPrdN49LnYUr_epGIQ8PP_5OCRpWcfwOZNcTUQCc3aGbalwndAbKgcqzl1IW4rVbNz6MXIDKgbK1W_y0nJZlUjTBe6JVhZrpt30dEvFaf-GavknWk2dMtc5AhMWBlQJl9TxuIUM6XGEesJn5lD_~2?action-id=5...</Tracking>\n <Tracking event=\"unmute\"><![CDATA[https://an.y
2023-12-31 23:37:06 UTC	6012	IN	Data Raw: 31 37 37 34 0d 0a 34 52 58 57 33 43 44 72 6b 51 55 59 44 79 79 69 75 49 79 30 7a 78 78 48 46 75 57 6f 6a 34 43 56 76 6c 58 49 5a 36 78 77 71 47 6e 56 59 76 35 69 31 55 56 6f 55 31 6e 5f 74 51 64 52 41 75 64 6f 4d 31 6e 73 4d 51 50 78 67 4f 50 47 77 79 6b 67 78 68 4d 44 67 43 38 76 4d 34 61 44 76 6e 66 39 38 43 71 62 6c 5f 7a 61 4c 68 7a 73 48 46 31 38 66 42 66 31 79 52 65 38 72 71 53 6b 51 5f 48 4b 6b 75 6d 6c 33 79 62 6a 50 72 64 4e 34 39 4c 6e 59 55 72 5f 65 70 47 49 51 38 50 50 5f 35 4f 43 52 70 57 63 66 77 4f 5a 4e 63 54 55 51 43 63 33 61 47 62 61 6c 77 6e 64 41 62 4b 67 63 71 7a 6c 31 49 57 34 72 56 62 4e 7a 36 4d 58 49 44 4b 67 62 4b 31 57 5f 79 30 6e 4a 5a 6c 55 6a 54 42 65 36 4a 56 68 5a 72 70 74 33 30 64 45 76 46 61 66 2d 47 61 76 6b 6e 57 6b 32 Data Ascii: 17744RXW3CDrkQUYDyyiuIy0zxxHFuWoj4CVvlXIZ6xwqGnVYv5i1UVoU1n_tQdRAudoM1nsMQPxgOPGwykgxhMDgC8vM4aDvnf98Cqbl_zaLhzsHF18fBf1yRe8rqSkQ_HKkuml3ybjPrdN49LnYUr_epGIQ8PP_5OCRpWcfwOZNcTUQCc3aGbalwndAbKgcqzl1IW4rVbNz6MXIDKgbK1W_y0nJZlUjTBe6JVhZrpt30dEvFaf-GavknWk2
2023-12-31 23:37:06 UTC	1501	IN	Data Raw: 35 44 36 0d 0a 5c 6e 20 20 20 20 20 20 5c 22 68 61 73 41 75 64 69 6f 5c 22 3a 20 74 72 75 65 2c 5c 6e 20 20 20 20 20 20 5c 22 76 6d 61 66 41 76 67 5c 22 3a 20 37 37 2e 31 37 31 36 30 37 39 37 5c 6e 20 20 20 20 7d 2c 5c 6e 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 5c 22 62 69 74 72 61 74 65 5c 22 3a 20 39 38 38 2c 5c 6e 20 20 20 20 20 20 5c 22 63 6f 64 65 63 5c 22 3a 20 5c 22 61 76 63 31 2e 36 34 30 30 31 45 2c 6d 70 34 61 2e 34 30 2e 32 5c 22 2c 5c 6e 20 20 20 20 20 20 5c 22 64 65 6c 69 76 65 72 79 5c 22 3a 20 5c 22 70 72 6f 67 72 65 73 73 69 76 65 5c 22 2c 5c 6e 20 20 20 20 20 20 5c 22 66 69 6c 65 53 69 7a 65 5c 22 3a 20 31 39 37 39 39 35 34 2c 5c 6e 20 20 20 20 20 20 5c 22 66 72 61 6d 65 72 61 74 65 5c 22 3a 20 33 30 2c 5c 6e 20 20 20 20 20 20 5c 22 68 65 Data Ascii: 5D6\n \"hasAudio\": true,\n \"vmafAvg\": 77.17160797\n },\n {\n \"bitrate\": 988,\n \"codec\": \"avc1.64001E,mp4a.40.2\",\n \"delivery\": \"progressive\",\n \"fileSize\": 1979954,\n \"framerate\": 30,\n \"he
2023-12-31 23:37:06 UTC	1347	IN	Data Raw: 35 33 43 0d 0a 37 31 37 65 63 2f 6d 70 34 2f 48 32 36 34 5f 31 32 38 30 5f 37 32 30 5f 31 37 33 30 2e 6d 70 34 5c 22 2c 5c 6e 20 20 20 20 20 20 5c 22 77 69 64 74 68 5c 22 3a 20 31 32 38 30 2c 5c 6e 20 20 20 20 20 20 5c 22 68 61 73 41 75 64 69 6f 5c 22 3a 20 74 72 75 65 2c 5c 6e 20 20 20 20 20 20 5c 22 76 6d 61 66 41 76 67 5c 22 3a 20 39 33 2e 32 30 38 39 37 36 37 35 5c 6e 20 20 20 20 7d 2c 5c 6e 20 20 20 20 7b 5c 6e 20 20 20 20 20 20 5c 22 62 69 74 72 61 74 65 5c 22 3a 20 33 32 35 30 2c 5c 6e 20 20 20 20 20 20 5c 22 63 6f 64 65 63 5c 22 3a 20 5c 22 61 76 63 31 2e 36 34 30 30 32 38 2c 6d 70 34 61 2e 34 30 2e 32 5c 22 2c 5c 6e 20 20 20 20 20 20 5c 22 64 65 6c 69 76 65 72 79 5c 22 3a 20 5c 22 70 72 6f 67 72 65 73 73 69 76 65 5c 22 2c 5c 6e 20 20 20 20 20 20 Data Ascii: 53C717ec/mp4/H264_1280_720_1730.mp4\",\n \"width\": 1280,\n \"hasAudio\": true,\n \"vmafAvg\": 93.20897675\n },\n {\n \"bitrate\": 3250,\n \"codec\": \"avc1.640028,mp4a.40.2\",\n \"delivery\": \"progressive\",\n
2023-12-31 23:37:06 UTC	5327	IN	Data Raw: 31 34 43 37 0d 0a 30 2c 5c 6e 20 20 20 20 20 20 5c 22 69 64 5c 22 3a 20 5c 22 56 50 38 5f 36 34 30 5f 33 36 30 5f 39 30 30 2e 77 65 62 6d 5c 22 2c 5c 6e 20 20 20 20 20 20 5c 22 74 79 70 65 5c 22 3a 20 5c 22 76 69 64 65 6f 2f 77 65 62 6d 5c 22 2c 5c 6e 20 20 20 20 20 20 5c 22 75 72 6c 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 73 74 72 6d 2e 79 61 6e 64 65 78 2e 72 75 2f 76 68 2d 63 61 6e 76 61 73 2d 63 6f 6e 76 65 72 74 65 64 2f 76 6f 64 2d 63 6f 6e 74 65 6e 74 2f 36 37 36 34 34 33 34 36 36 37 35 31 37 39 33 31 37 38 33 2f 61 61 62 30 33 32 65 35 2d 38 33 32 35 2d 34 65 33 36 2d 61 64 33 62 2d 63 63 30 38 38 63 63 37 31 37 65 63 2f 77 65 62 6d 2f 56 50 38 5f 36 34 30 5f 33 36 30 5f 39 30 30 2e 77 65 62 6d 5c 22 2c 5c 6e 20 20 20 20 20 20 5c 22 77 69 64 74 Data Ascii: 14C70,\n \"id\": \"VP8_640_360_900.webm\",\n \"type\": \"video/webm\",\n \"url\": \"https://strm.yandex.ru/vh-canvas-converted/vod-content/6764434667517931783/aab032e5-8325-4e36-ad3b-cc088cc717ec/webm/VP8_640_360_900.webm\",\n \"widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50053	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:06 UTC	724	OUT	GET /wp-content/uploads/2023/05/cropped-pngwing.com_-32x32.png HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065822
2023-12-31 23:37:06 UTC	313	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:37:06 GMT Content-Type: image/png Content-Length: 1164 Last-Modified: Mon, 29 May 2023 17:58:46 GMT Connection: close ETag: "6474e7d6-48c" Expires: Mon, 01 Jan 2024 23:37:06 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:37:06 UTC	1164	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 53 49 44 41 54 58 c3 ed 97 4f 68 9c 45 18 c6 7f ef 7c df fe 49 5c 37 6d 62 b6 d2 12 5a a1 da d2 2a 1e ac 14 a4 11 04 51 8a f8 1f 69 8a 54 41 94 9e 0c 05 c5 8b f5 50 4f 42 eb a1 07 b1 07 2f 05 a5 f1 62 eb 41 69 55 54 48 02 95 52 c1 da 16 9a 6a ba 6d 37 26 1b c9 a6 bb f9 ba fb fd 9d d7 43 56 49 4b 23 49 b6 39 e9 0b 73 9a 99 77 9e 79 66 de 67 9e 81 ff 7a 48 2b 93 bd 81 de 75 40 0f 30 9c eb 1b b4 4b c9 61 5a dc c0 13 c0 3e a0 6d a9 09 5a 02 20 22 0e 90 6e 85 49 f7 5f e8 35 40 0e f0 e6 a3 57 55 2d 60 01 9d 37 cf 91 6d 0e 22 36 d7 37 a8 8b 65 60 2d f0 19 f0 82 37 d0 eb cc 33 e6 47 e0 03 c0 9f 67 13 3d 88 ec 07 b6 2e 9a 01 60 0a b8 0a 1c 68 26 fb 22 d7 37 Data Ascii: PNGIHDR szzSIDATXOhE\|I\7mbZ*QiTAPOB/bAiUTHRjm7&CVIK#I9swyfgzH+u@0KaZ>mZ "nI_5@WU-`7m"67e`-73Gg=.`h&"7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50060	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:06 UTC	2397	OUT	POST /watch/95527089/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065825_9445006332d6ec3fb636577aa211e187677173e3b5522832d31f041aa78299a4&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003705%3Aet%3A1704065825%3Ac%3A1%3Arn%3A644129409%3Arqn%3A5%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C1274%2C6%2C%2C%2C%2C4356%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065825&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)lt(41100)aw(1)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%222757811704065824348%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:07 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:06 GMT Expires: Sun, 31-Dec-2023 23:37:06 GMT Last-Modified: Sun, 31-Dec-2023 23:37:06 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50061	77.88.21.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:06 UTC	1995	OUT	POST /watch/37412095/1?page-url=https%3A%2F%2Fyastatic.net%2Fsafeframe-bundles%2F0.83%2F1-1-0%2Frender.html&charset=utf-8&hittoken=1704065815_5531fc1407172c0bbf9aa66d000737d4b159512ed7795bcd32eb743975447eff&browser-info=nb%3A1%3Acl%3A4261%3Aar%3A1%3Avf%3A6xnlnf9l49q2dxhnxcbm1hnf%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1358133347124%3Ahid%3A794577329%3Aphid%3A1042935619%3Az%3A60%3Ai%3A20240101003705%3Aet%3A1704065826%3Ac%3A1%3Arn%3A335146239%3Arqn%3A2%3Au%3A1704065810322028050%3Aw%3A1x1%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Aeu%3A2%3Ans%3A1704065788005%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1704065826&t=gdpr(6)clc(0-0-0)rqnt(2)aw(0)rcm(1)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://yastatic.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:07 UTC	755	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://yastatic.net Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:07 GMT Expires: Sun, 31-Dec-2023 23:37:07 GMT Last-Modified: Sun, 31-Dec-2023 23:37:07 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50062	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:06 UTC	2650	OUT	GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003703%3Aet%3A1704065824%3Ac%3A1%3Arn%3A72148332%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C566%2C1934%2C553%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065820463%3Afp%3A2678%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065824%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:07 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 427 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:07 GMT Expires: Sun, 31-Dec-2023 23:37:07 GMT Last-Modified: Sun, 31-Dec-2023 23:37:07 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:07 UTC	427	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 61 4e 5a 6a 45 62 75 6c 57 75 64 6b 36 42 54 47 76 43 31 56 35 68 34 67 6b 47 6d 68 71 5a 46 50 62 59 64 34 53 57 4a 55 63 44 37 59 6e 49 47 77 4d 6c 76 76 50 59 35 35 32 45 4d 74 66 4b 31 47 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"aNZjEbulWudk6BTGvC1V5h4gkGmhqZFPbYd4SWJUcD7YnIGwMlvvPY552EMtfK1G"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50056	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:07 UTC	623	OUT	GET /get-direct/2079704/CqlfRiIvmmNbyB9_IYd8tw/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:08 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:08 GMT Content-Type: image/webp Content-Length: 3742 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 20 Jul 2020 14:11:47 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: e294fc357cc372b0 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]}
2023-12-31 23:37:08 UTC	3742	IN	Data Raw: 52 49 46 46 96 0e 00 00 57 45 42 50 56 50 38 20 8a 0e 00 00 f0 47 00 9d 01 2a 0b 01 96 00 3e 51 22 8f 46 23 a1 a1 24 a3 d2 6b 80 90 0a 09 69 6e 89 85 d7 fb 36 f4 28 22 e2 a0 34 05 1a 1c 53 7a d4 d2 c7 a0 dd b3 5c 8c de e9 7c 8c fa d4 bf 6c 7d 80 3f 52 7d 34 bd a2 7c a0 30 7c f4 93 f2 23 d0 5b 2f dc 99 fa 6f 5d 1d ae fc b2 d4 23 d8 7f e8 78 06 c0 07 e6 5f d8 7f d6 7d c3 fa a4 6a 89 e1 de 84 ff d4 f8 dc 7d 57 fe c7 b0 3f f3 cf ed df f5 3d a2 ff c7 ff dd e7 47 ea 5f fc de e2 5f af 7d 6d 3d 1a cb 48 95 35 b7 01 06 89 d8 fe be 6c 30 7c a5 96 95 0a 00 35 ee 67 9d a6 02 81 5a bd 30 b7 65 a7 51 ac f1 7d b7 b1 f6 dc 94 1b 67 6e fd 3f ff ff af df fd bd 88 dd af 6d 92 d1 87 40 63 63 5e ac 2b 47 17 91 65 c0 2f cf 15 50 7b 51 c3 95 4c 33 f8 2a 44 71 96 72 d6 95 01 55 Data Ascii: RIFFWEBPVP8 G>Q"F#$kin6("4Sz\\|l}?R}4\|0\|#[/o]#x_}j}W?=G__}m=H5l0\|5gZ0eQ}gn?m@cc^+Ge/P{QL3DqrU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50063	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:07 UTC	700	OUT	GET / HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065822
2023-12-31 23:37:09 UTC	543	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:37:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: _ym_uid=1704065783133633243; expires=Mon, 30-Dec-2024 23:37:08 GMT; Max-Age=31536000; path=/; domain=.faq-kak.ru; secure Set-Cookie: _ym_d=1704065828; expires=Mon, 30-Dec-2024 23:37:08 GMT; Max-Age=31536000; path=/; domain=.faq-kak.ru; secure X-UA-Compatible: IE=edge Link: <https://faq-kak.ru/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding
2023-12-31 23:37:09 UTC	15841	IN	Data Raw: 65 32 65 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 72 75 2d 52 55 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 21 2d 2d 20 53 45 4f 20 d0 be d1 82 Data Ascii: e2ee<!DOCTYPE html><html class="html" lang="ru-RU" prefix="og: https://ogp.me/ns#"><head><meta charset="UTF-8"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name="viewport" content="width=device-width, initial-scale=1">... SEO
2023-12-31 23:37:09 UTC	16384	IN	Data Raw: 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 6f 63 65 61 6e 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 Data Ascii: nd{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pa
2023-12-31 23:37:09 UTC	16384	IN	Data Raw: d1 8c d1 8e d1 82 d0 b5 d1 80 d0 bd d0 be d0 b9 20 d0 b2 d0 b5 d1 80 d1 81 d0 b8 d0 b9 2e 09 09 3c 2f 70 3e 0d 0a 0d 0a 09 09 0d 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2e 62 6c 6f 67 2d 65 6e 74 72 79 2d 73 75 6d 6d 61 72 79 20 2d 2d 3e 0d 0a 0d 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6c 6f 67 2d 65 6e 74 72 79 2d 72 65 61 64 6d 6f 72 65 20 63 6c 72 22 3e 0a 09 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 71 2d 6b 61 6b 2e 72 75 2f 6b 61 6b 2d 6e 61 6a 74 69 2d 73 76 6f 79 75 2d 70 6f 63 68 74 75 2d 76 2d 69 6e 73 74 61 67 72 61 6d 65 2f 22 20 0a 09 3e 0a 09 d0 9f d1 80 d0 be d0 b4 d0 be d0 bb d0 b6 d0 b8 d1 82 d1 8c 20 d1 87 d1 82 d0 b5 d0 bd d0 b8 d0 b5 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d Data Ascii: .</p></div>... .blog-entry-summary --><div class="blog-entry-readmore clr"><a href="https://faq-kak.ru/kak-najti-svoyu-pochtu-v-instagrame/" > <span class="screen-reader-
2023-12-31 23:37:09 UTC	9498	IN	Data Raw: 09 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 75 73 74 6f 6d 5f 68 74 6d 6c 2d 33 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 5f 74 65 78 74 20 73 69 64 65 62 61 72 2d 62 6f 78 20 77 69 64 67 65 74 5f 63 75 73 74 6f 6d 5f 68 74 6d 6c 20 63 6c 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 77 69 64 67 65 74 20 63 75 73 74 6f 6d 2d 68 74 6d 6c 2d 77 69 64 67 65 74 22 3e 3c 21 2d 2d 20 59 61 6e 64 65 78 2e 52 54 42 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 79 61 43 6f 6e 74 65 78 74 43 62 3d 77 69 6e 64 6f 77 2e 79 61 43 6f 6e 74 65 78 74 43 62 7c 7c 5b 5d 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 64 73 2f 73 79 73 74 65 6d 2f 63 6f 6e Data Ascii: </div><div id="custom_html-3" class="widget_text sidebar-box widget_custom_html clr"><div class="textwidget custom-html-widget">... Yandex.RTB --><script>window.yaContextCb=window.yaContextCb\|\|[]</script><script src="https://yandex.ru/ads/system/con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50066	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	841	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 302 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:08 UTC	302	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 37 37 34 38 36 33 35 32 39 31 39 35 30 34 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 37 37 34 38 36 34 38 31 33 37 30 30 36 34 22 2c 22 49 6d 70 49 44 22 3a 22 31 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836277486352919504","Duid":"1704065783133633243","RtbBidReqID":"7836277486481370064","ImpID":"1","CryptaIDv2":"0"},"Vari
2023-12-31 23:37:08 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:08 GMT Expires: Sun, 31 Dec 2023 23:37:08 GMT Last-Modified: Sun, 31 Dec 2023 23:37:08 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50065	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	10577	OUT	GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2FWempCLkIbzZwUHPjhEF8mIz2l90AhwORk3zANoqzOXloYacFIxLo6STzBCAObeahMyaQ6RoCmaLkxdjigDA5Ze8mNzBenLhUeQVNRpwbW6FT%2BucqF%2FH310Zam7CGyf02nfihF2f2DgK1TcmRUNwWPvCYsVjxsSnNVaf2uvH%2FNNPraex4n8BfrO4OM4ms50SyublR9w%2B77d3j5nF3f6fe3eze%2FWvzy812vn4Is%2Fzx%2Brbeny40G4BOF3tyrD3siaMt%2FHRDdA7EUl%2F5ZgrMBW2oPJeEfjZ1K6tWIfkg3SgM8qc1ehTgfULS66IZQTO0gpyhIhh%2F7V2m2RyoBH6BLsP97hd1Q6RefrhnQpgVdAjssKy7sOWn71hLOXZnsi8NbPXqi0OUnZDCK%2Bam%2BjCFoj9I675fceCcYVzWgvROrQGmkR9NV26EXir%2FzKWRn6dHr89eBmry52%2BH3nNXTB0KOfxjgAQfYS%2BF9NTy7Bw1efkkCklZ8WvFBt2Yz%2BgxsPHtxcz0J8CWG0buBXPfq%2BQBiLFDevRkrYlPSwwBWtRIa8lOZp93jzdzR6SZvdg0i6OI%2FN8sgyyx9zMnVaiPoi9nqY418Npa343YIcGJCpQVJX96qpnpw%2Fb9k6PML4yuWAmuBDkiWXcywZ6sm%2BVBbo113wf%2FAYt05fN68WlnC4NwLmgOV51Gds5742yCBPPEDie2Oa9GckWZVUHuIOAIvN92seI4XZp4%2FATzDTDPzLykSPnDyc1inOoB9ut%2FAU19AWg%3D&pcode-icookie=ov0pI87eXrcREkH0lgvJEedIFAWRizuGVD%2BBgeQGBJgX1jC7e8ft0flwyvzyBFUtIQbeSUQUVH%2BiozgIAXTI1X64o5o%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=1&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=2757811704065824348&target-id=42019029&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A347%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B6058876922672%5D HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:09 UTC	758	IN	HTTP/1.1 200 Ok Access-Control-Allow-Origin: * Connection: Close Content-Type: application/json Transfer-Encoding: chunked X-Yandex-Req-Id: 1704065828817747-1017388694183985900600269-production-app-host-sas-pcode-436 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:08 GMT expires: Sun, 31 Dec 2023 23:37:08 GMT last-modified: Sun, 31 Dec 2023 23:37:08 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=an.yandex.ru; path=/; expires=Wed, 07-Jan-2033 23:37:08 GMT; SameSite=None; Secure ssr: true strict-transport-security: max-age=31536000 timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:37:09 UTC	471	IN	Data Raw: 31 44 30 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 37 30 36 35 34 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 36 33 33 36 38 38 31 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 Data Ascii: 1D0{"impressionData":{"currency":"RUB","revenueUSD":"0.000070654","precision":"estimated","revenue":"0.006336881"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"78362
2023-12-31 23:37:09 UTC	3514	IN	Data Raw: 44 42 33 0d 0a 72 6d 61 74 63 68 2f 3f 64 70 3d 31 35 31 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 6e 2e 79 61 6e 64 65 78 2e 72 75 25 32 46 6d 61 70 75 69 64 25 32 46 73 61 70 65 69 73 25 32 46 25 32 34 25 37 42 55 53 45 52 5f 49 44 25 37 44 22 2c 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 62 65 74 77 65 65 6e 64 69 67 69 74 61 6c 2e 63 6f 6d 2f 6d 61 74 63 68 3f 62 69 64 64 65 72 5f 69 64 3d 34 33 35 35 34 26 63 61 6c 6c 62 61 63 6b 5f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 6e 2e 79 61 6e 64 65 78 2e 72 75 25 32 46 6d 61 70 75 69 64 25 32 46 62 65 74 77 65 65 6e 64 69 67 69 74 61 6c 69 73 25 32 46 25 32 34 25 37 42 55 53 45 52 5f 49 44 25 37 44 22 2c 22 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 6d 61 70 75 Data Ascii: DB3rmatch/?dp=151&r=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fsapeis%2F%24%7BUSER_ID%7D","https://ads.betweendigital.com/match?bidder_id=43554&callback_url=https%3A%2F%2Fan.yandex.ru%2Fmapuid%2Fbetweendigitalis%2F%24%7BUSER_ID%7D","https://an.yandex.ru/mapu
2023-12-31 23:37:09 UTC	1324	IN	Data Raw: 35 32 35 0d 0a 6e 73 7a 71 4b 56 78 4c 4a 33 72 34 6b 50 71 51 2f 79 39 30 22 2c 22 31 31 39 22 2c 22 39 30 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 44 37 42 41 39 42 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 43 32 41 30 38 34 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 34 38 30 41 30 31 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 52 69 67 68 74 22 3a 22 23 39 38 36 30 33 46 46 46 22 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 31 31 39 2c 22 68 22 3a 39 30 7d 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 78 22 3a 30 2c 22 79 22 3a 31 31 2c 22 77 22 3a 31 31 39 2c 22 68 22 3a 33 37 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 Data Ascii: 525nszqKVxLJ3r4kPqQ/y90","119","90",{"ColorWizBack":"#D7BA9B","ColorWizButton":"#C2A084","ColorWizButtonText":"#480A01","ColorWizBackRight":"#98603FFF","smart-center":{"x":0,"y":0,"w":119,"h":90},"smart-centers":[{"x":0,"y":11,"w":119,"h":37},{"x":0,"y"
2023-12-31 23:37:09 UTC	6859	IN	Data Raw: 31 41 43 33 0d 0a 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 34 37 39 37 32 34 37 2f 69 78 75 4a 77 7a 6e 73 7a 71 4b 56 78 4c 4a 33 72 34 6b 50 71 51 2f 78 39 30 30 22 2c 22 39 30 30 22 2c 22 36 37 39 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 44 37 42 41 39 42 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 43 32 41 30 38 34 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 34 38 30 41 30 31 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 52 69 67 68 74 22 3a 22 23 39 38 36 30 33 46 46 46 22 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 38 39 39 2c 22 68 22 3a 36 37 38 7d 2c 22 73 6d 61 72 74 2d 63 65 Data Ascii: 1AC3ars.mds.yandex.net/get-direct/4797247/ixuJwznszqKVxLJ3r4kPqQ/x900","900","679",{"ColorWizBack":"#D7BA9B","ColorWizButton":"#C2A084","ColorWizButtonText":"#480A01","ColorWizBackRight":"#98603FFF","smart-center":{"x":0,"y":0,"w":899,"h":678},"smart-ce
2023-12-31 23:37:09 UTC	1316	IN	Data Raw: 35 31 44 0d 0a 50 4f 43 54 5f 43 6c 59 6a 4a 4c 42 6c 57 45 65 65 64 67 69 61 58 48 6d 64 76 6d 4e 4e 52 5a 64 53 48 63 71 6c 42 64 38 41 75 36 6a 76 6f 4f 66 4b 64 6f 4f 75 48 56 39 70 52 61 56 6e 36 62 33 49 5f 64 75 67 6e 67 7a 43 4b 64 71 5f 37 2d 61 44 2d 50 44 6b 4c 45 6d 78 4d 6e 69 79 73 38 53 30 30 58 43 63 47 69 39 6e 59 36 78 7a 74 2d 6a 64 43 73 57 42 57 30 30 7e 32 22 2c 22 73 69 74 65 6c 69 6e 6b 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 74 61 72 67 65 74 55 72 6c 22 3a 22 22 7d 2c 7b 22 75 72 6c 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 74 61 72 67 65 74 55 72 6c 22 3a 22 22 7d 2c 7b 22 75 72 6c 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 22 2c 22 74 61 72 67 65 74 55 72 6c 22 3a 22 22 7d 2c 7b 22 Data Ascii: 51DPOCT_ClYjJLBlWEeedgiaXHmdvmNNRZdSHcqlBd8Au6jvoOfKdoOuHV9pRaVn6b3I_dugngzCKdq_7-aD-PDkLEmxMniys8S00XCcGi9nY6xzt-jdCsWBW00~2","sitelinks":[{"url":"","title":"","targetUrl":""},{"url":"","title":"","targetUrl":""},{"url":"","title":"","targetUrl":""},{"
2023-12-31 23:37:09 UTC	6867	IN	Data Raw: 31 41 43 42 0d 0a 47 57 53 61 63 51 79 58 41 76 69 70 57 4e 4e 4e 42 4a 49 62 71 65 66 4f 67 65 4f 55 31 4f 44 43 36 49 73 4a 66 4e 4c 54 72 73 46 34 44 38 6e 75 32 33 6f 5a 6e 32 59 73 38 65 52 66 66 59 31 6f 6d 6e 32 30 2d 4d 50 42 4b 75 5f 33 46 58 62 37 78 71 6b 69 42 74 69 78 43 49 54 30 46 70 4f 57 59 58 34 6a 48 6c 7a 35 69 69 6a 32 59 56 61 6a 68 55 6b 77 65 72 71 4d 49 69 6e 68 62 71 6c 77 6e 64 41 62 4b 67 63 71 7a 6c 32 6f 4f 5f 6b 62 79 64 46 47 51 45 49 62 32 6d 43 66 36 6d 47 38 5f 42 43 55 57 30 47 79 4a 7a 35 64 58 70 30 36 54 4e 54 66 6c 30 4a 39 74 6c 53 4b 69 6e 4a 69 77 69 77 55 33 57 30 30 7e 32 22 2c 22 66 61 6c 73 65 43 6c 69 63 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 63 6f 75 6e 74 2f 57 54 61 65 Data Ascii: 1ACBGWSacQyXAvipWNNNBJIbqefOgeOU1ODC6IsJfNLTrsF4D8nu23oZn2Ys8eRffY1omn20-MPBKu_3FXb7xqkiBtixCIT0FpOWYX4jHlz5iij2YVajhUkwerqMIinhbqlwndAbKgcqzl2oO_kbydFGQEIb2mCf6mG8_BCUW0GyJz5dXp06TNTfl0J9tlSKinJiwiwU3W00~2","falseClick":"https://an.yandex.ru/count/WTae
2023-12-31 23:37:09 UTC	1308	IN	Data Raw: 35 31 35 0d 0a 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 34 38 38 35 36 38 32 2f 79 71 6d 64 79 4d 30 32 51 78 47 45 5a 48 34 66 51 4e 4b 31 36 77 2f 79 33 30 30 22 2c 22 33 30 30 22 2c 22 33 30 30 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 32 37 33 44 42 36 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 36 31 37 34 43 43 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 45 38 46 34 46 46 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 52 69 67 68 74 22 3a 22 23 33 39 34 42 43 45 22 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 33 30 30 2c 22 68 22 3a 33 30 30 7d 2c 22 73 6d 61 72 74 2d 63 Data Ascii: 515avatars.mds.yandex.net/get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/y300","300","300",{"ColorWizBack":"#273DB6","ColorWizButton":"#6174CC","ColorWizButtonText":"#E8F4FF","ColorWizBackRight":"#394BCE","smart-center":{"x":0,"y":0,"w":300,"h":300},"smart-c
2023-12-31 23:37:09 UTC	6875	IN	Data Raw: 31 41 44 33 0d 0a 2c 7b 22 78 22 3a 34 33 2c 22 79 22 3a 31 2c 22 77 22 3a 36 37 34 2c 22 68 22 3a 38 39 39 7d 2c 7b 22 78 22 3a 31 2c 22 79 22 3a 32 31 30 2c 22 77 22 3a 38 39 39 2c 22 68 22 3a 36 37 34 7d 5d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 34 38 38 35 36 38 32 2f 79 71 6d 64 79 4d 30 32 51 78 47 45 5a 48 34 66 51 4e 4b 31 36 77 2f 78 31 38 30 22 2c 22 31 38 30 22 2c 22 31 38 30 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 32 37 33 44 42 36 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 36 31 37 34 43 43 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 45 38 46 34 46 46 22 2c 22 43 6f 6c 6f Data Ascii: 1AD3,{"x":43,"y":1,"w":674,"h":899},{"x":1,"y":210,"w":899,"h":674}]}],["https://avatars.mds.yandex.net/get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/x180","180","180",{"ColorWizBack":"#273DB6","ColorWizButton":"#6174CC","ColorWizButtonText":"#E8F4FF","Colo
2023-12-31 23:37:09 UTC	1300	IN	Data Raw: 35 30 44 0d 0a 65 61 73 79 70 61 79 77 6f 72 6c 64 5f 62 6f 74 22 2c 22 74 79 70 65 22 3a 22 74 65 6c 65 67 72 61 6d 22 7d 5d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 61 64 64 49 6e 66 6f 22 3a 7b 22 74 79 70 65 22 3a 22 63 61 6c 6c 6f 75 74 73 22 2c 22 63 61 6c 6c 6f 75 74 73 5f 6c 69 73 74 22 3a 5b 22 d0 92 d1 81 d0 b5 20 d0 be d1 84 d0 b8 d1 86 d0 b8 d0 b0 d0 bb d1 8c d0 bd d0 be 22 2c 22 31 30 30 30 30 20 d0 b4 d0 be d0 b2 d0 be d0 bb d1 8c d0 bd d1 8b d1 85 20 d0 ba d0 bb d0 b8 d0 b5 d0 bd d1 82 d0 be d0 b2 22 2c 22 d0 91 d1 8b d1 81 d1 82 d1 80 d0 be 22 2c 22 31 30 30 25 20 d1 83 d0 b4 d0 b0 d0 bb d0 b5 d0 bd d0 bd d0 be 22 5d 7d 2c 22 62 6d 63 61 74 65 67 6f 72 79 49 64 22 3a 22 32 30 30 30 30 35 31 37 33 22 2c 22 64 6f 6d 61 69 6e 49 64 22 3a Data Ascii: 50Deasypayworld_bot","type":"telegram"}],"position":2,"addInfo":{"type":"callouts","callouts_list":[" ","10000 ","","100% "]},"bmcategoryId":"200005173","domainId":
2023-12-31 23:37:09 UTC	6883	IN	Data Raw: 31 41 44 42 0d 0a 6d 56 6f 57 5f 36 6d 69 56 33 72 71 4f 49 44 61 57 45 6c 70 34 74 30 37 36 32 53 41 4b 45 55 42 71 73 68 47 72 53 5a 48 63 41 31 77 73 45 31 52 6b 62 59 36 5f 4b 4d 74 2d 4f 77 49 6f 37 35 66 4b 41 46 77 41 56 34 6d 71 5f 43 4e 70 74 63 74 70 76 45 31 5f 4f 68 78 76 64 49 33 55 30 37 45 74 59 4c 51 54 50 42 4f 4b 58 38 45 48 49 4e 65 44 45 30 6b 58 62 4f 4f 44 71 36 52 6c 4b 51 70 30 59 55 62 78 72 30 5a 6b 63 41 37 50 64 6a 78 5f 66 56 4e 76 65 37 79 62 57 37 58 51 47 46 76 31 70 7a 35 68 5f 31 4e 63 5a 54 53 77 72 38 5f 42 69 39 48 64 6a 68 79 62 67 78 49 6e 4b 59 70 66 63 66 36 50 4d 47 71 46 34 41 6a 52 55 56 73 59 56 5a 49 42 78 4c 36 7a 74 48 34 67 6e 4a 70 31 6a 56 42 4e 51 75 69 30 7e 32 22 2c 22 70 72 6f 6d 6f 45 78 74 65 6e 73 Data Ascii: 1ADBmVoW_6miV3rqOIDaWElp4t0762SAKEUBqshGrSZHcA1wsE1RkbY6_KMt-OwIo75fKAFwAV4mq_CNptctpvE1_OhxvdI3U07EtYLQTPBOKX8EHINeDE0kXbOODq6RlKQp0YUbxr0ZkcA7Pdjx_fVNve7ybW7XQGFv1pz5h_1NcZTSwr8_Bi9HdjhybgxInKYpfcf6PMGqF4AjRUVsYVZIBxL6ztH4gnJp1jVBNQui0~2","promoExtens

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50067	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	2528	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003707%3Aet%3A1704065827%3Ac%3A1%3Arn%3A942903913%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065827%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(64300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:08 UTC	1200	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:08 GMT Expires: Sun, 31-Dec-2023 23:37:08 GMT Last-Modified: Sun, 31-Dec-2023 23:37:08 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:08 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:08 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 2b 6d 6e 32 4a 37 4c 69 46 33 66 46 2b 62 44 54 53 79 66 44 4d 53 56 63 36 65 44 55 2f 71 6a 72 43 4e 6a 36 34 73 69 44 71 77 6a 45 71 75 4a 34 34 79 70 52 55 65 35 38 44 70 4f 61 48 4e 30 4e 22 2c 20 22 62 22 3a 22 5a 51 62 6c 55 4b 36 72 47 59 65 38 67 6a 48 4c 57 4c 50 6a 41 56 30 41 34 5a 46 46 6c 43 48 66 57 4f 6e 34 31 4c 51 6c 4b 53 73 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 32 38 5f 61 66 35 30 32 35 33 36 65 62 32 65 65 30 64 63 39 64 38 64 39 33 64 62 63 65 61 34 62 31 35 36 30 33 39 37 34 34 30 62 32 38 36 62 33 64 61 33 30 35 35 38 36 30 65 39 38 33 38 31 30 32 37 39 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"+mn2J7LiF3fF+bDTSyfDMSVc6eDU/qjrCNj64siDqwjEquJ44ypRUe58DpOaHN0N", "b":"ZQblUK6rGYe8gjHLWLPjAV0A4ZFFlCHfWOn41LQlKSs="},"eu":2,"hittoken":"1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50068	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	10883	OUT	GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2FWempCLkIbzZwUHPjhEF8mIz2l90AhwORk3zANoqzOXloYacFIxLo6STzBCAObeahMyaQ6RoCmaLkxdjigDA5Ze8mNzBenLhUeQVNRpwbW6FT%2BucqF%2FH310Zam7CGyf02nfihF2f2DgK1TcmRUNwWPvCYsVjxsSnNVaf2uvH%2FNNPraex4n8BfrO4OM4ms50SyublR9w%2B77d3j5nF3f6fe3eze%2FWvzy812vn4Is%2Fzx%2Brbeny40G4BOF3tyrD3siaMt%2FHRDdA7EUl%2F5ZgrMBW2oPJeEfjZ1K6tWIfkg3SgM8qc1ehTgfULS66IZQTO0gpyhIhh%2F7V2m2RyoBH6BLsP97hd1Q6RefrhnQpgVdAjssKy7sOWn71hLOXZnsi8NbPXqi0OUnZDCK%2Bam%2BjCFoj9I675fceCcYVzWgvROrQGmkR9NV26EXir%2FzKWRn6dHr89eBmry52%2BH3nNXTB0KOfxjgAQfYS%2BF9NTy7Bw1efkkCklZ8WvFBt2Yz%2BgxsPHtxcz0J8CWG0buBXPfq%2BQBiLFDevRkrYlPSwwBWtRIa8lOZp93jzdzR6SZvdg0i6OI%2FN8sgyyx9zMnVaiPoi9nqY418Npa343YIcGJCpQVJX96qpnpw%2Fb9k6PML4yuWAmuBDkiWXcywZ6sm%2BVBbo113wf%2FAYt05fN68WlnC4NwLmgOV51Gds5742yCBPPEDie2Oa9GckWZVUHuIOAIvN92seI4XZp4%2FATzDTDPzLykSPnDyc1inOoB9ut%2FAU19AWg%3D&pcode-icookie=ov0pI87eXrcREkH0lgvJEedIFAWRizuGVD%2BBgeQGBJgX1jC7e8ft0flwyvzyBFUtIQbeSUQUVH%2BiozgIAXTI1X64o5o%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=3&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=2757811704065824348&target-id=38218259&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.NzIwNTc2MDg4ODQ5Mzg5NzgKNzIwNTc2MDk0NDYwNjAwNzcKNzIwNTc2MDc4MDYwODQyMzgKNzIwNTc2MDk0MDQ4NzUxNTQKNzIwNTc2MDk1MzczNTA1MDE%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A509%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A5%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A1%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B2228892376093%5D HTTP/1.1 Host: an.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:09 UTC	814	IN	HTTP/1.1 200 Ok Connection: Close Content-Type: application/json Transfer-Encoding: chunked X-Yandex-Req-Id: 1704065828889810-712232659646435895100279-production-app-host-sas-pcode-117 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:09 GMT expires: Sun, 31 Dec 2023 23:37:09 GMT last-modified: Sun, 31 Dec 2023 23:37:09 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=an.yandex.ru; path=/; expires=Sun, 07-Jan-2024 23:37:08 GMT; SameSite=None; Secure ssr: true strict-transport-security: max-age=31536000 timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:37:09 UTC	5005	IN	Data Raw: 31 33 38 35 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 38 39 32 37 32 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 38 30 30 36 36 38 33 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 Data Ascii: 1385{"impressionData":{"currency":"RUB","revenueUSD":"0.000089272","precision":"estimated","revenue":"0.008006683"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836
2023-12-31 23:37:09 UTC	1449	IN	Data Raw: 35 41 32 0d 0a 22 23 46 46 46 46 46 46 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 52 69 67 68 74 22 3a 22 23 36 38 36 39 36 35 46 46 22 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 32 36 37 2c 22 68 22 3a 31 35 30 7d 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 78 22 3a 30 2c 22 79 22 3a 33 36 2c 22 77 22 3a 32 36 37 2c 22 68 22 3a 38 34 7d 2c 7b 22 78 22 3a 31 2c 22 79 22 3a 30 2c 22 77 22 3a 32 36 36 2c 22 68 22 3a 31 35 30 7d 2c 7b 22 78 22 3a 34 35 2c 22 79 22 3a 30 2c 22 77 22 3a 31 35 30 2c 22 68 22 3a 31 35 30 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 33 30 2c 22 77 22 3a 32 36 36 2c 22 68 22 3a 39 32 7d 2c 7b 22 78 22 3a 34 35 2c 22 79 22 3a 30 2c 22 77 22 3a 31 31 32 2c 22 68 22 Data Ascii: 5A2"#FFFFFF","ColorWizBackRight":"#686965FF","smart-center":{"x":0,"y":0,"w":267,"h":150},"smart-centers":[{"x":0,"y":36,"w":267,"h":84},{"x":1,"y":0,"w":266,"h":150},{"x":45,"y":0,"w":150,"h":150},{"x":0,"y":30,"w":266,"h":92},{"x":45,"y":0,"w":112,"h"
2023-12-31 23:37:09 UTC	6734	IN	Data Raw: 31 41 34 36 0d 0a 61 6c 67 49 64 22 3a 22 31 22 2c 22 62 61 6e 6e 65 72 43 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 32 30 30 30 30 31 30 33 39 22 5d 2c 22 65 76 65 6e 74 48 61 73 68 22 3a 22 37 33 35 30 39 37 32 39 39 32 39 34 39 36 37 36 37 39 31 22 2c 22 69 73 54 75 72 62 6f 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 6f 72 64 65 72 4f 70 74 69 6f 6e 73 22 3a 22 30 22 2c 22 6f 72 64 65 72 54 61 67 73 22 3a 5b 5d 2c 22 62 61 6e 6e 65 72 4c 61 6e 67 22 3a 22 31 22 2c 22 63 61 6c 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 63 6f 75 6e 74 2f 57 56 53 65 6a 49 5f 7a 4f 6f 56 58 32 4c 63 65 30 4b 71 46 30 31 43 52 51 32 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 44 54 4e 70 6a 56 6c 2d 46 72 Data Ascii: 1A46algId":"1","bannerCategories":["200001039"],"eventHash":"7350972992949676791","isTurboBanner":false,"orderOptions":"0","orderTags":[],"bannerLang":"1","callUrl":"https://an.yandex.ru/count/WVSejI_zOoVX2Lce0KqF01CRQ2OQbKgbKga4mGHzFfSxUxRVkVDTNpjVl-Fr
2023-12-31 23:37:09 UTC	1441	IN	Data Raw: 35 39 41 0d 0a 67 62 61 6f 2e 72 75 2f 70 72 6f 64 75 63 74 2d 73 65 61 72 63 68 2f 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 79 61 6e 64 65 78 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 63 70 63 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 31 30 33 36 32 30 36 34 31 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 31 35 35 37 34 30 32 39 36 32 39 26 75 74 6d 5f 74 65 72 6d 3d 25 44 30 25 41 44 25 44 30 25 42 41 25 44 31 25 38 31 25 44 30 25 42 46 25 44 31 25 38 30 25 44 30 25 42 35 25 44 31 25 38 31 25 44 31 25 38 31 25 32 30 25 44 30 25 42 34 25 44 30 25 42 45 25 44 31 25 38 31 25 44 31 25 38 32 25 44 30 25 42 30 25 44 30 25 42 32 25 44 30 25 42 41 25 44 30 25 42 30 25 32 30 25 44 31 25 38 32 25 44 30 25 42 45 25 44 30 25 42 32 25 44 30 25 42 30 25 44 31 25 38 30 25 44 30 25 42 Data Ascii: 59Agbao.ru/product-search/?utm_source=yandex&utm_medium=cpc&utm_campaign=103620641&utm_content=15574029629&utm_term=%D0%AD%D0%BA%D1%81%D0%BF%D1%80%D0%B5%D1%81%D1%81%20%D0%B4%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B0%20%D1%82%D0%BE%D0%B2%D0%B0%D1%80%D0%B
2023-12-31 23:37:09 UTC	6742	IN	Data Raw: 31 41 34 45 0d 0a 6d 70 61 69 67 6e 3d 31 30 33 36 32 30 36 34 31 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 31 35 35 37 34 30 32 39 36 32 39 26 75 74 6d 5f 74 65 72 6d 3d 25 44 30 25 41 44 25 44 30 25 42 41 25 44 31 25 38 31 25 44 30 25 42 46 25 44 31 25 38 30 25 44 30 25 42 35 25 44 31 25 38 31 25 44 31 25 38 31 25 32 30 25 44 30 25 42 34 25 44 30 25 42 45 25 44 31 25 38 31 25 44 31 25 38 32 25 44 30 25 42 30 25 44 30 25 42 32 25 44 30 25 42 41 25 44 30 25 42 30 25 32 30 25 44 31 25 38 32 25 44 30 25 42 45 25 44 30 25 42 32 25 44 30 25 42 30 25 44 31 25 38 30 25 44 30 25 42 45 25 44 30 25 42 32 25 32 30 25 44 30 25 42 38 25 44 30 25 42 37 25 32 30 25 44 30 25 39 41 25 44 30 25 42 38 25 44 31 25 38 32 25 44 30 25 42 30 25 44 31 25 38 46 26 79 63 6c 69 64 3d Data Ascii: 1A4Empaign=103620641&utm_content=15574029629&utm_term=%D0%AD%D0%BA%D1%81%D0%BF%D1%80%D0%B5%D1%81%D1%81%20%D0%B4%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B0%20%D1%82%D0%BE%D0%B2%D0%B0%D1%80%D0%BE%D0%B2%20%D0%B8%D0%B7%20%D0%9A%D0%B8%D1%82%D0%B0%D1%8F&yclid=
2023-12-31 23:37:09 UTC	1433	IN	Data Raw: 35 39 32 0d 0a 56 58 32 4c 64 77 30 6a 71 4a 30 44 43 57 56 49 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 44 54 4e 70 6a 56 6c 2d 46 72 58 5a 6c 53 2d 76 64 56 44 74 48 67 46 77 4b 76 7a 32 64 44 66 71 78 64 37 49 41 4e 2d 65 31 6d 65 64 32 63 53 46 4f 79 64 74 4f 41 76 7a 45 36 65 6b 57 31 75 4b 47 31 38 5a 66 7a 45 64 34 66 35 38 66 37 64 53 5f 65 78 52 48 66 4b 36 64 4b 38 62 32 6c 39 51 76 4d 66 39 79 52 39 61 57 69 38 4f 71 6d 65 57 42 39 41 33 39 49 55 68 38 33 66 63 70 45 31 44 52 39 4f 35 6a 30 67 52 47 59 33 59 32 30 43 31 4b 36 37 4b 53 4a 4a 78 49 71 6a 42 49 71 6a 37 48 73 4a 42 72 77 35 41 32 54 55 62 34 4c 65 39 72 77 79 49 58 30 45 5f 4d 51 41 61 31 68 48 74 63 53 4b 72 6e 77 4a 6f 53 47 6d 33 52 72 75 66 37 70 Data Ascii: 592VX2Ldw0jqJ0DCWVIOQbKgbKga4mGHzFfSxUxRVkVDTNpjVl-FrXZlS-vdVDtHgFwKvz2dDfqxd7IAN-e1med2cSFOydtOAvzE6ekW1uKG18ZfzEd4f58f7dS_exRHfK6dK8b2l9QvMf9yR9aWi8OqmeWB9A39IUh83fcpE1DR9O5j0gRGY3Y20C1K67KSJJxIqjBIqj7HsJBrw5A2TUb4Le9rwyIX0E_MQAa1hHtcSKrnwJoSGm3Rruf7p
2023-12-31 23:37:09 UTC	6750	IN	Data Raw: 31 41 35 36 0d 0a 6e 73 43 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 6d 69 78 42 6c 65 6e 64 4d 6f 64 65 22 3a 22 6d 75 6c 74 79 70 6c 79 22 2c 22 64 65 66 61 75 6c 74 42 6f 72 64 65 72 43 6f 6c 6f 72 22 3a 22 72 67 62 61 28 31 36 33 2c 20 31 37 32 2c 20 31 39 31 2c 20 30 2e 31 35 29 22 2c 22 64 65 66 61 75 6c 74 42 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 66 38 66 61 66 62 22 2c 22 70 72 69 6d 61 72 79 22 3a 22 72 67 62 28 33 37 2c 20 33 39 2c 20 34 31 29 22 2c 22 73 65 63 6f 6e 64 61 72 79 22 3a 22 72 67 62 61 28 33 37 2c 20 33 39 2c 20 34 31 2c 20 30 2e 37 37 29 22 2c 22 74 65 72 74 69 61 72 79 22 3a 22 72 67 62 61 28 33 37 2c 20 33 39 2c 20 34 31 2c 20 30 2e 34 39 29 22 2c 22 71 75 61 74 65 72 6e 61 72 79 22 3a 22 72 67 62 61 28 33 37 2c 20 33 Data Ascii: 1A56nsColor":"#ffffff","mixBlendMode":"multyply","defaultBorderColor":"rgba(163, 172, 191, 0.15)","defaultBackground":"#f8fafb","primary":"rgb(37, 39, 41)","secondary":"rgba(37, 39, 41, 0.77)","tertiary":"rgba(37, 39, 41, 0.49)","quaternary":"rgba(37, 3
2023-12-31 23:37:09 UTC	1425	IN	Data Raw: 35 38 41 0d 0a 55 76 43 65 6a 78 56 51 77 2d 74 68 77 73 76 76 64 77 73 7a 64 66 5a 63 66 54 4e 63 36 4b 45 6c 42 67 6b 77 72 5a 51 52 43 34 6c 33 72 6a 37 44 79 68 47 75 31 57 5f 79 58 51 4d 44 6f 2d 76 6c 6b 6f 74 4e 64 6a 53 4a 5f 4f 78 63 76 46 6b 6e 6e 78 42 57 74 4e 65 71 31 75 33 5f 48 53 33 6a 6c 36 4b 41 42 2d 62 54 4c 72 6c 6d 5a 51 55 75 6c 4c 51 74 74 47 62 36 34 48 56 42 6b 61 52 6f 76 4c 41 66 54 42 51 6d 79 6b 45 78 4e 4c 54 6e 79 30 61 47 46 62 78 33 6a 58 77 49 6b 69 65 62 31 30 61 5f 46 52 39 71 58 63 75 34 6a 4c 6e 6a 6b 75 38 62 49 43 36 33 30 46 55 58 54 50 78 4a 6b 4c 33 66 49 6f 49 4d 52 57 6d 5a 69 75 7a 6d 70 55 79 6f 6c 6e 37 39 39 69 4a 44 44 5a 2d 66 74 47 45 31 78 46 6c 5f 6f 45 56 65 36 57 37 74 69 5a 62 59 62 7a 76 30 56 78 Data Ascii: 58AUvCejxVQw-thwsvvdwszdfZcfTNc6KElBgkwrZQRC4l3rj7DyhGu1W_yXQMDo-vlkotNdjSJ_OxcvFknnxBWtNeq1u3_HS3jl6KAB-bTLrlmZQUulLQttGb64HVBkaRovLAfTBQmykExNLTny0aGFbx3jXwIkieb10a_FR9qXcu4jLnjku8bIC630FUXTPxJkL3fIoIMRWmZiuzmpUyoln799iJDDZ-ftGE1xFl_oEVe6W7tiZbYbzv0Vx
2023-12-31 23:37:09 UTC	6758	IN	Data Raw: 31 41 35 45 0d 0a 31 45 64 62 49 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 44 54 4e 70 6a 56 6c 2d 46 72 58 5a 6c 53 37 42 56 7a 70 35 35 61 39 32 4a 33 59 66 48 5a 32 4d 61 34 33 49 67 44 4d 57 4a 67 44 4f 53 72 32 36 64 39 41 32 63 37 6a 53 59 65 41 38 56 72 77 38 52 49 4a 75 75 67 61 66 36 44 36 72 4f 51 45 50 76 47 55 6e 67 7a 65 79 75 64 7a 43 76 48 35 4a 68 41 53 4a 2d 62 4b 2d 5a 4b 5a 61 68 6e 37 35 4b 58 36 4a 62 6f 4c 38 4d 65 45 51 41 73 79 76 64 52 55 4a 48 37 4c 49 57 65 6e 6d 5a 4d 51 58 37 72 48 65 77 61 66 48 39 41 4c 41 4b 61 74 37 62 37 65 74 4f 4b 4e 2d 35 59 57 58 6d 71 61 38 6e 69 41 35 61 66 6f 34 34 62 34 6b 67 6e 33 62 63 4c 58 41 66 36 44 4f 6e 65 42 32 37 4c 72 31 6a 33 72 4e 68 38 32 63 47 62 38 63 Data Ascii: 1A5E1EdbIOQbKgbKga4mGHzFfSxUxRVkVDTNpjVl-FrXZlS7BVzp55a92J3YfHZ2Ma43IgDMWJgDOSr26d9A2c7jSYeA8Vrw8RIJuugaf6D6rOQEPvGUngzeyudzCvH5JhASJ-bK-ZKZahn75KX6JboL8MeEQAsyvdRUJH7LIWenmZMQX7rHewafH9ALAKat7b7etOKN-5YWXmqa8niA5afo44b4kgn3bcLXAf6DOneB27Lr1j3rNh82cGb8c
2023-12-31 23:37:09 UTC	1417	IN	Data Raw: 35 38 32 0d 0a 6f 72 44 6c 48 57 5f 43 68 71 6c 6b 52 78 69 54 70 4f 64 74 4f 7a 72 77 44 30 55 30 5f 71 4e 30 78 52 6e 62 32 59 5f 66 4e 4c 54 52 79 38 73 64 6b 42 72 73 6b 4d 49 6c 68 35 53 67 4c 47 67 68 4a 73 79 78 44 58 2d 57 6c 41 78 71 4d 5a 79 71 5a 65 41 39 47 47 38 5f 42 61 55 63 30 47 79 4a 7a 35 64 76 70 30 36 54 4e 56 66 6c 47 4a 39 50 46 61 4b 69 6e 4a 69 77 69 77 55 33 57 30 30 7e 32 22 2c 22 66 61 6c 73 65 43 6c 69 63 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 63 6f 75 6e 74 2f 57 56 43 65 6a 49 5f 7a 4f 6f 56 58 32 4c 63 63 30 49 71 46 30 46 46 51 50 59 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 44 54 4e 70 6a 56 6c 2d 46 72 58 5a 6a 53 50 4e 43 63 69 34 75 36 73 6d 39 41 66 48 Data Ascii: 582orDlHW_ChqlkRxiTpOdtOzrwD0U0_qN0xRnb2Y_fNLTRy8sdkBrskMIlh5SgLGghJsyxDX-WlAxqMZyqZeA9GG8_BaUc0GyJz5dvp06TNVflGJ9PFaKinJiwiwU3W00~2","falseClick":"https://an.yandex.ru/count/WVCejI_zOoVX2Lcc0IqF0FFQPYOQbKgbKga4mGHzFfSxUxRVkVDTNpjVl-FrXZjSPNCci4u6sm9AfH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50070	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	622	OUT	GET /get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:09 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:08 GMT Content-Type: image/webp Content-Length: 4190 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 08 Aug 2023 10:30:44 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 1502bc22afb736fd NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:09 UTC	4190	IN	Data Raw: 52 49 46 46 56 10 00 00 57 45 42 50 56 50 38 20 4a 10 00 00 f0 4f 00 9d 01 2a b4 00 b4 00 3e 51 24 8f 45 a1 a1 09 84 72 c8 0c 02 82 59 1b b9 4d 9e a8 96 50 a0 80 64 06 38 07 ef f9 13 96 c9 fe 17 b2 f3 14 f8 5f ed 9f b3 9e cf 95 8f f0 9f 92 fd 95 76 d9 d3 7e 5f 3c cf ff 5b fc 37 e4 97 cd df f4 5e a7 ff 4c fb 03 7e aa 7e bc 7a d2 fe aa fb a9 fd cf f5 29 fd 03 fd 57 fd 6f f1 5e e9 7f ea 3f 69 3d de ff 64 ff 51 f8 dd f2 01 fd 5f fc 4f ff fe c6 9f 41 af dc 5f 4d 7f dc af 84 4f ec 3f f2 7f 71 7d a9 ff ff fb 00 7f f4 e0 42 f2 f7 66 b8 e5 fb 12 fe f7 d0 8f ac 68 f4 66 93 00 87 bd b1 fb ac 97 86 39 69 7c 57 7e e3 fe f3 d8 03 f9 e7 f9 4f 45 7c ff bd 59 ec 17 d2 3a fc 4c 53 ba 26 5a 84 3b d0 60 a0 43 15 21 9f 2c 0d fc c9 fd 3f fa 4b b8 b8 ce 9a a3 a1 35 86 28 fa e6 Data Ascii: RIFFVWEBPVP8 JO*>Q$ErYMPd8_v~_<[7^L~~z)Wo^?i=dQ_OA_MO?q}Bfhf9i\|W~OE\|Y:LS&Z;`C!,?K5(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50071	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	458	OUT	GET /wp-content/uploads/2023/05/cropped-pngwing.com_-32x32.png HTTP/1.1 Host: faq-kak.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065822
2023-12-31 23:37:09 UTC	313	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:37:08 GMT Content-Type: image/png Content-Length: 1164 Last-Modified: Mon, 29 May 2023 17:58:46 GMT Connection: close ETag: "6474e7d6-48c" Expires: Mon, 01 Jan 2024 23:37:08 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2023-12-31 23:37:09 UTC	1164	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 53 49 44 41 54 58 c3 ed 97 4f 68 9c 45 18 c6 7f ef 7c df fe 49 5c 37 6d 62 b6 d2 12 5a a1 da d2 2a 1e ac 14 a4 11 04 51 8a f8 1f 69 8a 54 41 94 9e 0c 05 c5 8b f5 50 4f 42 eb a1 07 b1 07 2f 05 a5 f1 62 eb 41 69 55 54 48 02 95 52 c1 da 16 9a 6a ba 6d 37 26 1b c9 a6 bb f9 ba fb fd 9d d7 43 56 49 4b 23 49 b6 39 e9 0b 73 9a 99 77 9e 79 66 de 67 9e 81 ff 7a 48 2b 93 bd 81 de 75 40 0f 30 9c eb 1b b4 4b c9 61 5a dc c0 13 c0 3e a0 6d a9 09 5a 02 20 22 0e 90 6e 85 49 f7 5f e8 35 40 0e f0 e6 a3 57 55 2d 60 01 9d 37 cf 91 6d 0e 22 36 d7 37 a8 8b 65 60 2d f0 19 f0 82 37 d0 eb cc 33 e6 47 e0 03 c0 9f 67 13 3d 88 ec 07 b6 2e 9a 01 60 0a b8 0a 1c 68 26 fb 22 d7 37 Data Ascii: PNGIHDR szzSIDATXOhE\|I\7mbZ*QiTAPOB/bAiUTHRjm7&CVIK#I9swyfgzH+u@0KaZ>mZ "nI_5@WU-`7m"67e`-73Gg=.`h&"7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50072	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	622	OUT	GET /get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:09 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:09 GMT Content-Type: image/webp Content-Length: 7814 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 09 Dec 2022 19:35:37 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 68dc912a8f98f74f NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
2023-12-31 23:37:09 UTC	7814	IN	Data Raw: 52 49 46 46 7e 1e 00 00 57 45 42 50 56 50 38 20 72 1e 00 00 d0 72 00 9d 01 2a b4 00 b4 00 3e 51 22 8e 44 a1 a1 09 cd 63 44 0c 02 82 59 0c 8b 31 46 bf 9c e0 9d b7 03 f2 af 2a 66 5f de 25 e8 17 f9 8f f5 2f fa 1e aa b3 c1 86 10 04 b8 3e 2e 0b a3 d4 7f d3 7e 5a 7b 5c 5c 9f cc 7f 72 fd 53 f1 e3 f9 8e fb ba 53 fd ef a2 9f 32 7f b8 fb a2 f9 b3 fe bb d4 bf e8 0f 60 4f d6 5f 4e bf ed bd 54 ff 5e ff 91 ea 27 f9 9f f6 af fb bf e6 bd db bf d2 ff d2 ff 13 ee a7 fb 7f f9 df d8 6f f1 9f 20 bf ce 3f cc 7a 60 7b 12 7f 83 ff 75 ec 15 fb 05 e9 a5 fb 51 f0 a5 fd b7 fe 17 ed b7 c0 f7 ec e7 ff 9f 60 0c 56 ff b8 fd b4 fa 77 e4 a3 da 1e e8 7a e2 7f 81 e2 8f a7 7f e8 fa 07 fc 93 ed cf e6 ff b1 fe e7 ff 78 f7 23 fd 87 85 3f 11 bf aa f5 02 fc 6f f9 4f f9 2f eb bf 8f 7c 4e ba ff fa Data Ascii: RIFF~WEBPVP8 rr>Q"DcDY1Ff_%/>.~Z{\\rSS2`O_NT^'o ?z`{uQ`Vwzx#?oO/\|N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50069	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	612	OUT	GET /favicon/steam.megakod.com?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:09 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:09 UTC	986	IN	Data Raw: 33 44 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 9a 49 44 41 54 78 01 62 64 00 82 d6 92 9f 3a 9c 6c 00 f6 cb 01 d8 9a 1c 88 c2 5f 27 33 17 6b db b6 6d db 36 ca f6 da 66 d9 d8 c2 da b6 6d db b6 3d ba 49 ef a6 ba ea ce 6f bf b7 fc de bb 4e ba 4f ba cf 20 f9 69 4d 08 1b 0e 42 ec 89 43 19 01 34 22 99 77 65 9e f9 27 8b aa 39 f9 84 0b bb af ca 85 c7 e9 4a c8 e0 f1 5e 37 9b bd a8 40 15 84 91 41 01 11 e8 77 a1 28 c3 8f 42 d8 58 ce 39 b6 ba 65 d6 7e 67 97 9f 7f 6d 10 61 54 50 85 d9 66 c9 f9 a5 a8 6f 75 31 ea 06 69 e5 22 8c 1a 22 a9 02 90 72 3b 54 3c ca 5f 82 57 bc 13 41 f9 8b 88 a2 ea f8 8b f9 5f 40 d6 3a 13 06 03 a8 2b 86 74 7b e0 dc f8 87 50 59 30 24 ef d8 a3 2e 6d fe 70 9e 07 01 ea 1a 06 Data Ascii: 3D3PNGIHDR szzIDATxbd:l_'3km6fm=IoNO iMBC4"we'9J^7@Aw(BX9e~gmaTPfou1i""r;T<_WA_@:+t{PY0$.mp
2023-12-31 23:37:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50073	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:08 UTC	393	OUT	GET /get-direct/2079704/CqlfRiIvmmNbyB9_IYd8tw/wy150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:09 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:09 GMT Content-Type: image/jpeg Content-Length: 6143 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 20 Jul 2020 14:11:47 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: ca177c2df3cace25 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:09 UTC	6143	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 96 01 0b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 07 05 06 02 03 08 01 09 ff c4 00 57 10 00 01 03 02 02 04 07 09 0a 0a 08 03 09 00 00 00 01 00 02 03 04 11 05 21 06 07 12 31 08 13 22 41 51 61 81 14 32 71 73 91 a1 b1 Data Ascii: JFIFC!"$"$C"W!1"AQa2qs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50075	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	669	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:10 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:37:09 GMT Expires: Sun, 31 Dec 2023 23:37:09 GMT Last-Modified: Sun, 31 Dec 2023 23:37:09 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:37:10 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50077	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	2627	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065828%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:10 UTC	1144	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:09 GMT Expires: Sun, 31-Dec-2023 23:37:09 GMT Last-Modified: Sun, 31-Dec-2023 23:37:09 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:09 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50076	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	2410	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003707%3Aet%3A1704065827%3Ac%3A1%3Arn%3A942903913%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065827%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(64300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:10 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:10 GMT Expires: Sun, 31-Dec-2023 23:37:10 GMT Last-Modified: Sun, 31-Dec-2023 23:37:10 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:10 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 47 6c 47 6c 51 70 48 66 7a 70 54 78 30 34 38 4a 63 4a 42 2b 39 39 4d 75 73 74 2f 57 48 6b 62 62 39 54 49 75 75 74 6b 4b 72 34 41 2b 6d 77 45 53 6c 6b 44 67 45 56 36 61 6d 36 5a 45 44 42 59 52 22 2c 20 22 62 22 3a 22 6d 6e 4b 78 76 6d 49 75 68 50 48 61 45 48 7a 61 70 63 4c 78 34 78 62 4c 72 38 58 2b 62 4c 76 52 2b 6d 56 37 56 72 73 56 6f 58 30 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 33 30 5f 65 63 39 35 66 32 61 31 31 63 62 33 64 38 36 39 32 30 63 36 38 35 66 66 30 63 30 63 62 61 30 65 33 38 33 32 61 64 35 30 30 36 37 62 61 39 38 38 63 61 36 65 61 37 36 32 64 64 36 32 36 35 38 65 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"GlGlQpHfzpTx048JcJB+99Must/WHkbb9TIuutkKr4A+mwESlkDgEV6am6ZEDBYR", "b":"mnKxvmIuhPHaEHzapcLx4xbLr8X+bLvR+mV7VrsVoX0="},"eu":2,"hittoken":"1704065830_ec95f2a11cb3d86920c685ff0c0cba0e3832ad50067ba988ca6ea762dd62658e"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50086	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	841	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 327 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:09 UTC	327	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 37 37 34 38 36 33 35 32 39 31 39 35 30 34 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 37 37 34 38 36 34 38 31 33 37 30 30 36 34 22 2c 22 49 6d 70 49 44 22 3a 22 31 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836277486352919504","Duid":"1704065783133633243","RtbBidReqID":"7836277486481370064","ImpID":"1","CryptaIDv2":"0"},"Vari
2023-12-31 23:37:10 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:10 GMT Expires: Sun, 31 Dec 2023 23:37:10 GMT Last-Modified: Sun, 31 Dec 2023 23:37:10 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50078	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	622	OUT	GET /get-direct/4797247/ixuJwznszqKVxLJ3r4kPqQ/y150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:10 GMT Content-Type: image/webp Content-Length: 4684 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 11 Nov 2023 14:53:40 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 3e24ba1efb6b1c92 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:10 UTC	4684	IN	Data Raw: 52 49 46 46 44 12 00 00 57 45 42 50 56 50 38 20 38 12 00 00 90 5f 00 9d 01 2a c7 00 96 00 3e 51 24 8e 45 21 a1 09 3d 03 4a 0c 02 82 50 06 28 92 9e c9 f4 0b f9 df 92 9e d4 9c a3 df 2f cf 22 0d c5 fe 6f 6e 89 eb 67 f5 66 f8 7f 35 df b5 de b1 1f ed bd 78 ff a8 f4 ba ea 8d f4 11 fd 8a eb 7e c1 46 f2 69 f4 8e 9a fb 36 02 6b df 9c 35 f0 0b 82 bb 9f 93 e3 8b 07 c8 14 cd 3a 59 7a eb 81 99 9e ee cf eb 60 e9 67 64 b2 e2 1e 88 5f ee 64 8f bb c7 62 3b fd fa 71 19 b2 87 78 6c c1 c8 e1 44 4f 6d c1 d3 60 82 17 ce af 0c 2e 3f c6 04 fd 46 4c a7 f6 22 a0 d2 33 e4 85 7e cd df bf b9 54 22 17 ed c8 1f 30 25 2f 3e 9e 49 7a 5d bc 33 bb 2a df c5 fc 5d ab 22 ee fd 45 42 ac ef 85 9b b4 f2 eb 4b 6e 03 ae be 07 43 85 95 c2 fc 5b 53 39 e8 26 bf b0 4a 18 d1 10 96 16 c3 79 ef 22 0a 54 Data Ascii: RIFFDWEBPVP8 8_>Q$E!=JP(/"ongf5x~Fi6k5:Yz`gd_db;qxlDOm`.?FL"3~T"0%/>Iz]3]"EBKnC[S9&Jy"T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50085	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	392	OUT	GET /get-direct/5390434/BjZdIptJ4sDX9C-pmleJ0A/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:10 GMT Content-Type: image/jpeg Content-Length: 5589 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 08 Aug 2023 10:30:44 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: b07274268d719195 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
2023-12-31 23:37:10 UTC	5589	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 b4 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 ff c4 00 47 10 00 01 04 02 00 04 03 06 03 03 07 08 0b 00 00 00 01 00 02 03 04 05 11 06 12 21 31 13 41 51 07 22 61 71 81 91 14 32 42 15 16 d1 23 Data Ascii: JFIFC!"$"$C"G!1AQ"aq2B#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50079	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	622	OUT	GET /get-direct/5146926/b8_SoKGCJf1bxAcZNxExjQ/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:10 GMT Content-Type: image/webp Content-Length: 5014 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 25 Aug 2023 11:51:41 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 9619a1aa5bb89deb NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:10 UTC	5014	IN	Data Raw: 52 49 46 46 8e 13 00 00 57 45 42 50 56 50 38 20 82 13 00 00 30 57 00 9d 01 2a b4 00 87 00 3e 51 22 8e 45 21 a1 09 0c 93 82 0c 02 82 59 c0 31 70 32 0a e8 0f 90 41 d9 53 41 07 3b b6 9d 77 a0 05 03 7f d5 fe cf 78 53 fa 3f b9 fe 86 19 13 ec cf 51 ae f8 ff 8d eb ef fb 3f 09 7f 72 fe 37 fe 67 a8 a7 8b f8 13 6d 47 a0 a7 b9 df 6c ff 7f f9 99 fd af d5 3b 55 0f 09 f4 4f e3 77 f6 5f fb 9f b0 1e e7 1f dd ff 61 bd e3 3f cc f3 0f f5 a7 fe 5f 71 3f d8 4f fa dd 91 9a 76 e8 2c 85 f0 a9 d2 d0 df d7 f3 37 bb 5c b4 d1 fe 5b 60 81 d2 36 22 2a 70 15 bf c8 30 7b 0a 3f b4 5f 2a d9 ad 98 a8 33 79 09 3d 6d 31 99 6f e0 f7 02 ef 7f e8 b2 32 52 a6 4a cd 68 60 09 40 fa 15 6a fc fd 0c 3b 49 90 aa c6 25 a9 98 fc a4 6a 73 57 36 5c 4c 5d 0f 76 08 f8 49 59 8e 18 c7 07 5a f7 5b 68 69 32 22 Data Ascii: RIFFWEBPVP8 0W>Q"E!Y1p2ASA;wxS?Q?r7gmGl;UOw_a?_q?Ov,7\[`6"p0{?_*3y=m1o2RJh`@j;I%jsW6\L]vIYZ[hi2"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50087	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	392	OUT	GET /get-direct/4885682/yqmdyM02QxGEZH4fQNK16w/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:10 GMT Content-Type: image/jpeg Content-Length: 9925 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 09 Dec 2022 19:35:37 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: dcef219d20e17991 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
2023-12-31 23:37:10 UTC	9925	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 b4 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 02 01 05 06 07 00 04 08 03 ff c4 00 44 10 00 01 03 03 03 02 04 03 05 05 05 04 0b 00 00 00 01 02 03 04 00 05 11 06 12 21 07 31 13 22 41 51 14 61 71 08 32 81 91 a1 15 16 23 Data Ascii: JFIFC!"$"$C"D!1"AQaq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50081	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	605	OUT	GET /favicon/compday.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:10 UTC	999	IN	Data Raw: 33 45 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 a7 49 44 41 54 78 01 d4 d7 53 94 f4 48 14 07 f0 4a 55 3c ed d5 78 6d db b6 8d e7 b5 6d db b6 6d db b6 6d db 68 24 e9 38 7b ee bf 92 73 f6 f3 e3 e6 bb 83 df b0 fa 22 2a 85 4d 23 76 bb ff d3 79 49 c3 b6 77 26 35 43 5f 95 e4 9c 2f c6 64 24 f4 29 4d d3 0f c8 c8 0f 9e 20 03 cf bb 9c bc 64 d3 f9 bf 99 da fa 9c fd cf a1 4c a5 f2 fd 49 ab 5a 3d 91 5c 67 44 58 e4 cf 29 60 cb 35 39 1c ab 08 f8 fa 6f 7d d8 70 ff 80 1f ff de 73 c8 77 3b e2 18 f2 ac 2d 96 38 bb dc 1d d8 ee e2 c7 75 72 ee 19 cd c7 c9 f1 a1 59 56 25 e7 19 6a e2 f7 4b 0e 55 a1 ae ab 90 2b 13 e6 7e e3 1b 3f c1 57 df fd 1a ee b1 ea 20 fc f8 eb ef e1 bb ff b0 47 c9 af 7a 62 53 f2 f6 dd Data Ascii: 3E0PNGIHDR szzIDATxSHJU<xmmmmh$8{s"*M#vyIw&5C_/d$)M dLIZ=\gDX)`59o}psw;-8urYV%jKU+~?W GzbS
2023-12-31 23:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50082	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	608	OUT	GET /favicon/easypay.world?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:10 UTC	844	IN	Data Raw: 33 34 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 0c 49 44 41 54 78 01 bc d7 03 ac 24 5b 14 46 e1 b5 ab cf b3 6d db b6 6d db b6 19 3d db b6 6d 85 cf b6 6d 7b 6c 4f 57 ed f9 93 5c 76 61 4e 5f ad e4 9b b9 de dd e5 63 44 e4 ee 53 02 cb cb d6 b2 89 2c 2b 73 4a 10 45 2a 03 e5 7b 79 43 5e 90 2f cd 6c 3c 54 67 54 0f 9e 02 58 57 0e 93 cd 65 2e 49 a8 2e 93 81 f2 ba dc 23 6f 9a d9 04 4a b2 8a e1 0b 02 a7 cb fe 32 0b 5d 6b 84 3c 2e 97 9b d9 af d1 2f 40 c3 d7 03 ae 91 35 e9 99 be 94 d3 cc ec 55 1a 4a 0a 86 6f 05 3c 10 3f 3c aa 95 e4 3e 77 df 99 86 ac 61 f8 ba 2d c3 17 a3 43 5f 7c 3b 82 37 de 1f 02 46 5c 0e 9b ac 3b 1b 2b 2d 3b 03 0d fd 23 07 77 dc 12 d6 61 f8 fc c0 e3 b2 2e 0d dd fb c4 3f 9c 7d Data Ascii: 345PNGIHDR szzIDATx$[Fmm=mm{lOW\vaN_cDS,+sJE*{yC^/l<TgTXWe.I.#oJ2]k<./@5UJo<?<>wa-C_\|;7F\;+-;#wa.?}
2023-12-31 23:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50080	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	612	OUT	GET /favicon/expert-massage.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:10 UTC	1645	IN	Data Raw: 36 36 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 06 2d 49 44 41 54 78 01 c4 97 03 b0 ec 4a 10 86 7b e6 f8 1a 07 d7 b6 6d db 36 0f 9e 6d 14 9e 6d 1b d7 b6 6d db b6 6d ed c9 6e e6 fd 9d d7 5b b5 95 ca 3d 78 ec aa 6f 67 92 9d 4c f7 74 f7 74 26 8a 32 22 8b 4c 24 19 2a 8f 5e 5b 45 a6 85 21 55 0e fd 3c 80 e5 36 29 ba 81 ff af a0 bf 0f ac 07 4b 49 d3 21 6a a9 02 94 8e a8 0c 28 ae 87 5e 12 68 07 b2 82 43 f1 fe 9b 87 4a a7 5e b8 5a 3e f5 bc 1d 6d 5b 11 04 b9 a7 23 ac e3 e1 b9 f5 a1 c8 78 7d 2c 32 8f 1f 46 1e e0 19 60 c8 1e 31 24 93 06 2c 34 c5 f0 fb 0c 48 06 14 63 ac 55 2d 6e ed df db f2 f6 7e 9d 10 b8 11 4d 21 02 65 b9 0d 51 01 74 0b 02 ba a3 23 8f 6d 8c 29 76 60 41 d6 f2 57 4f 44 e4 de 01 2d Data Ascii: 666PNGIHDR szz-IDATxJ{m6mmmmn[=xogLtt&2"L$*^[E!U<6)KI!j(^hCJ^Z>m[#x},2F`1$,4HcU-n~M!eQt#m)v`AWOD-
2023-12-31 23:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50083	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	606	OUT	GET /favicon/deart-13.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:10 UTC	2151	IN	Data Raw: 38 36 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 08 27 49 44 41 54 78 01 ec d6 73 7c a3 f9 d6 00 f0 13 27 f5 76 6d db 36 c7 f3 be f7 ae 77 c7 f6 14 93 2a 6d 54 77 6d db b6 77 c7 6a 47 41 1b 73 cb a0 d8 c6 c9 93 47 e7 3e b9 be 99 6a f7 ef fd c6 78 74 ce e7 77 ce 81 3f 8d c7 a3 7f 7f 9e 63 cf c2 69 c0 41 87 b6 04 3d 2d 48 38 5a 36 c2 24 88 be fa 55 18 78 18 29 73 ad 1c 38 86 af 36 dc ba f9 93 5b 1e 84 df c3 fc f3 83 3c d2 a2 c0 a8 be f2 c5 de 9d ab 1b d1 ff 24 8e e8 4a 7e fd e0 d5 8b 64 30 89 75 cb 2e 10 76 7d bf c6 89 e1 a7 d0 fa d3 ea d6 11 7d e5 d3 b4 ab 15 7f 79 77 b1 04 a6 8a 72 6a 67 a1 b7 11 69 7b bd 9f 76 b7 e8 68 8b e6 d3 98 4d 7e 39 4c d1 c1 cf 57 5f 8a dd f5 1f 91 dd 8d 87 08 Data Ascii: 860PNGIHDR szz'IDATxs\|'vm6w*mTwmwjGAsG>jxtw?ciA=-H8Z6$Ux)s86[<$J~d0u.v}}ywrjgi{vhM~9LW_
2023-12-31 23:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50084	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:09 UTC	382	OUT	GET /favicon/steam.megakod.com?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:10 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:10 UTC	986	IN	Data Raw: 33 44 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 9a 49 44 41 54 78 01 62 64 00 82 d6 92 9f 3a 9c 6c 00 f6 cb 01 d8 9a 1c 88 c2 5f 27 33 17 6b db b6 6d db 36 ca f6 da 66 d9 d8 c2 da b6 6d db b6 3d ba 49 ef a6 ba ea ce 6f bf b7 fc de bb 4e ba 4f ba cf 20 f9 69 4d 08 1b 0e 42 ec 89 43 19 01 34 22 99 77 65 9e f9 27 8b aa 39 f9 84 0b bb af ca 85 c7 e9 4a c8 e0 f1 5e 37 9b bd a8 40 15 84 91 41 01 11 e8 77 a1 28 c3 8f 42 d8 58 ce 39 b6 ba 65 d6 7e 67 97 9f 7f 6d 10 61 54 50 85 d9 66 c9 f9 a5 a8 6f 75 31 ea 06 69 e5 22 8c 1a 22 a9 02 90 72 3b 54 3c ca 5f 82 57 bc 13 41 f9 8b 88 a2 ea f8 8b f9 5f 40 d6 3a 13 06 03 a8 2b 86 74 7b e0 dc f8 87 50 59 30 24 ef d8 a3 2e 6d fe 70 9e 07 01 ea 1a 06 Data Ascii: 3D3PNGIHDR szzIDATxbd:l_'3km6fm=IoNO iMBC4"we'9J^7@Aw(BX9e~gmaTPfou1i""r;T<_WA_@:+t{PY0$.mp
2023-12-31 23:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50088	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:10 UTC	2738	OUT	GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065829%3Ac%3A1%3Arn%3A616456058%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C561%2C1440%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065829%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:10 UTC	1200	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 427 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:10 GMT Expires: Sun, 31-Dec-2023 23:37:10 GMT Last-Modified: Sun, 31-Dec-2023 23:37:10 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:10 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:10 UTC	427	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 35 6c 68 73 69 72 31 41 67 56 36 4c 35 74 4b 79 62 55 37 39 75 68 35 76 77 78 55 53 63 66 59 63 37 7a 4e 77 59 51 42 62 5a 32 7a 73 39 76 5a 50 76 31 57 31 31 6d 50 2b 2f 4e 52 69 2b 4b 2f 31 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"5lhsir1AgV6L5tKybU79uh5vwxUScfYc7zNwYQBbZ2zs9vZPv1W11mP+/NRi+K/1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50090	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:10 UTC	9601	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=32&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=8664901704065829155&target-id=7346773&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.55%2C%22isInIframe%22%3Afalse%2C%22w%22%3A288%2C%22h%22%3A0%2C%22width%22%3A288%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A912%2C%22top%22%3A993%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=4060&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChqkpLDktumBYKCuFJjIOb_ZzNx4hqaWSkCfCPLKiXykR0RSEdl7hh1te7vbviVmal1mm02XqWWonJOXg7wloC8CcAmjVUUkiZz8-fp2t7YTRWHFCmKU4mhVQaqk0aryQk2jDbJAmdN4OJ7cQ3cJDd3D8qSepHsyF6-7RJ7Q43uYnsQlfEmX-MFD9nyX0IV4grIX9PsCiPaCfJfoGZfdA_wk5S5Rfx5Ey8fCGbjlL-Dmz3_iZUcwoLX62Vab5kHRkyLNYRrVeaiJMkWQxYmxa-IkyJMAppE5co16Gq1-Zk8Vq0m6RlmEIUyjKk7zTqWMKTqposxTqlxdRnmoiJMwg5H3WJMXyYsHqvx5qqNYoY5JkzKNqTLlg8gpCzJlUFJFeUGuiLMk6KoiLMNMnVMVUV2jjDIKVeBIHfdjr9ZEZClV2HPl05IEcVQ2Gq3S5FlQ0uvo6EGCbaTRqjMYdZcwC_IHE71U4UiSZ4pSmSXk_WeY50l5hOdRGeTQAyONB_pn_-h1SHFIJz7k4h8ivBSm5y8yCF0Crb7gJXbIVi2tVTLNkiwtlGWTyikpc01QxkndlofFTr7IkpxD1FS-sGCu3JP3BfeoG1c8I-qDFkv6X74CxLlxUjjyDy6jKO5rPX0Ml1YQw4nsW1OZPe5ptKGiSCrDW6YkjQrF7wGMJ_otZPssXK3-eNLM7seONRsgDueLD0-CLEZAPU4Ez07uiX_eeChmwe65Yk_kgnfx24Q8tJvRryhecDcaiYdd1o3uqdwE6m-m1pHMacswLyKNijKO0t2jzelAOKs63F9cfwA4yPfozYNk-qHqi_QjKO9RmzzHSRQFRd5-wn2xep1j2a08yyyZk6h05nS3-yypzJQ1lY4Tm6iux7HDld3i0YxDaMfdeHMIvVyU5WGtyFGQaRa_K3Z1rDzuJDvpJC4p8yIgi750fXWnyLuyiH7ow10Rh1MxYesWTA9IFHm5YMPgmYalgoxKmYWqfihVfDULikRdROquaqQXQU4RRyQlVQFsUQKbFElG0leUZxt71UFjM2Sx8nXElyu9OfdBOiuYm_q1qvzeIGit5u8FrsNcYhf3a-1X4BcncnEHoQheXvCy4ucGPSviNJt-V9GbIJd1_5AsTYsZzZOioOkeTj9yPeHXPjHn5lxEAmyJNOxRv_py7yXq30NQ_3NH62V3oitW_vDDfmkMw1XhO9bV0GuGxay_tWm5C_44YsbuAfZ0fQN8rbmyeO9hTxb2Cu8Dtu-lX13xjhSuDTycZ_8J9sC1Tdte29_H_vEPXNfqFeZlwzq5q5lpHDk57AcHekmQPiDR5b3J6Pg7pCNBwqLYIf71rSXOUkBbS7LsRJPeZEBWb36cvUwC1cfZSZEpWTTisk1zdVbA6_abtOCCH7THvxy8P_H_pESb_7D2OcJLXkjpQcA9jEW0rS7i1n7_XnSHpHvO3cT__-M-F7kn6B44rt17i6a_g_-LLUlhtNT_VNzL0PfWLXyWfDj8DXpEiu-0kyu-D4HecPmx9PsvlURDCfb1swtx-wu9Txtf26K5ED9_7LeqoGzvRHSXYoTXXYtcFEP41qUFAY61LrQdFdYN6t65w5C2g10E9QEKlEV7KC4E5hsX9B16r4y912u9zHehbqdL643vSrKJdT35Z_wLvzY--DUB20ihAzJPQtWHioBIFYUmmGjLcfg3Dr2OtNYW2WZGLmy5eAYeL_768Q8z6VW0dG229TcLu3gXCtWyL9tFpLfxngx96oKhZanL9fzF0q8tegIxj13f_TEWAz_4CnLT3vqW4pbffBfSdsXP0oVwtJ4_aaeobfMJ4W4rjJabV_TL9pd56RG-w_O3wLea_T7sjlR0CDUDuUh90obvYXw63bigphnI66I-heKaSJayB8vYij8HCl79k17te3pxTdFv3gevSzEyH4DghRhEOF6It6X5G91ib6MyQNcwLOAchE6aJeqYNOw6Bic48rkDL4iLkqa5kukMcW_150tYewuMC8g6wJ2Ft1328tJb5WOY673t6_cTDhRBy7CCbe5nYphqe0kHYyXl-y7R4d4urMv0biP-jxIc_jaOm7iojvZSSh3sT3bHv4nkGkjYXQjbpEeIhLG32Vg48C8qfwrOQ_t6fGWReOsxumHamA8q-w6hDo_gjQUL7gb4ZjORtCQun67fV00cJGhjeGRnIioZS-h6Xpc890d4rTPrJ1qKPlDVUeMW-W-cX8SzCn8sqZLtoYnyrV0BaqIepoeB4IcACQ4f4q7ZSofMtov5rVJcpAy7BZE1wL9ixWTIczUQyn5bXC8h2ahcfnFjS_Eyg1MMNnpcOzZus9SjO2vvqsKtEUfrNzWkFr3IPltuFIq9z5W8AD2IfUKmpxd_7DLC7ekWcB0R-LWBpYcFl_BzNLj6Q2F12zoshg3lmq15BCQbhMmbKzMpGO8oFl3Id-0CdQOs1j1PD5gbum3Z6jUcmmGvUeYCtba2JzdY4hP5UXWgNyCy7anihuW1M0s_nrFibLsV7Vf_bSfjuVB_cYDcEAkaum9msB2G78RqfGyZ7EwTl4HRNv5Yd_65_H7Ag6rSjaTbIHj9hg3X_JUxd33EvQ6UbD05_kBzM-vDmEVsYB808filYEdyvMrmVeHaHqeIF_q9eVZDLda2rX9LAL3BD9a4jbVjrh8Ir3f8GietZ3e0bfcLmoems0Kew2f7EipIjuBvoIVjbxDvfTE21CZoVxeu8UyIGP6kDQFnIQoPPv8RGUNH8N_RwR3Y_ukE-fj-q8x_RROaS8z8E1uKIrBC-TcyF97_Utd5GvxGFnp3oS1oaS-53GYH5vNQgMMeAObfASBGM-JaLZnrcpI0wWwjqZnrWuTmu5AbJMLZG8F44DwgPRwDL8Q7MMuHYGzkl_4nPBaNkQx-Qu2zRx4E71l6uNWzp8d89tVaODcRSNZ-4Hti5lsW7PrG_znxBC3jCEhOMbhGKNzBxcbMe5fm3S68aJOTTIsDlEcJ-o5uhelvUPtPwfStozddo-Jh62-vE40ZQOSCXz8W_Rrx8IJlhWhZi_2v18w4npwRZA_HMb77v5e8wyBn1MSpXh1rQosn_XMDb4HvWzsDxkSJt-H6qpUMU5g_w7DGWl9cel1qMQreBmPmPyqAB9kDqtm1r6W_uI_f-Z4ufiu-gpvLemYN2u0xegutWymfr0tHJbhCMo8W_uxiQyNzDfdd7-pXNuj8HdAqzZ-RYqvd-qY1WJqB-wvZbthoTNqCLX41Uznw3ZZTt2D_z995FfP90eWX9DFJTXxz-JogyS7X5-fZlh9Mi-2WC1mqo7F7wec6x7KlWJY5TsxXbTdFQZElPBqQvAqwydfGPAqNo6Rp2cIi0jVkUfTjNtLonKUdhUsTCum5VSlNuNKhlCstD1fUVlPHwWEbRevpAAhgOh0sJKgo2qrDC1F_Z7sa70La6m41ln3BRlVHkRfFFqDitK9sXdDVuCptVU7STE2RN-XOKqSIsqstrNXIKheqGHqjmno0C2s-pq3cGuEtP38wLufGlKMhp6JFkSIgm72jXPMPpeZRnURtX5xVo8O0IdPGKuvPwrZ-GKKqgdofR3y1aXZ0IgO-gJdGhIBY5NiBKSh5TuqYNhixHRJrIzE7Vkh0blg8mbVLzIZ-FIeH7KiHvPV1c5h4Xtw6RHhm1hcbh1uCXHQVjfJq01W9UjdR8thFxTWLTNpB-RRGBW-rFFfsuXbSiYwvnPZEKMfMoa8dujXVlqcQ70SufKMIV1MhTkP9zntgq12j6YdK7XjcrBhwlbrL0VMYPyWFQZyWB3TvcmSNpmldv1ndAXkqLVdy4sD20VeXZ2RZp_gaz0cxKYeKzlDflg6rz2wCdP7G6WrE5UNqHXVMSf1lI1YeoFJnNE_3rBnTI50xXUc6W1qzwbADxjsqGiOcQMNfOu0ANM0TMqPzS9CteK2KbqtiNU7BNa9pa6nZxr2E2oqJ4LvJbze0OKVNY5cV3Zo4Jv8ExD645hp6p2egp-uAitOIslSSM0ZkHTGBCX6GdI4zDECDcNxyB3ze85cOeKsA-A%3D%3D&uniformat=true&callback=Ya%5B5107538958271%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:37:11 UTC	1354	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065830825417-15005098931327609082-balancer-l7leveler-kubr-yp-vla-13-BAL-9563 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:10 GMT expires: Sun, 31 Dec 2023 23:37:10 GMT last-modified: Sun, 31 Dec 2023 23:37:10 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:37:10 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: MediaCreative x-xss-protection: 1; mode=block
2023-12-31 23:37:11 UTC	6839	IN	Data Raw: 31 41 41 46 0d 0a 7b 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 69 73 53 74 61 66 66 22 3a 22 66 61 6c 73 65 22 2c 22 77 68 79 54 68 69 73 41 64 4c 61 6e 64 69 6e 67 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 72 65 61 73 6f 6e 73 2e 79 61 6e 64 65 78 2d 74 65 61 6d 2e 72 75 2f 3f 68 69 74 6c 6f 67 69 64 3d 37 38 33 36 32 37 38 36 37 33 39 37 31 31 34 35 36 38 30 22 2c 22 73 73 70 49 64 22 3a 22 22 2c 22 70 61 67 65 4c 61 6e 67 22 3a 22 31 22 2c 22 64 65 74 61 69 6c 65 64 44 65 76 69 63 65 54 79 70 65 22 3a 33 33 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 6d 65 64 69 61 2d 63 72 65 61 74 69 76 65 22 2c 22 Data Ascii: 1AAF{"common":{"pageId":"3797907","deviceType":"6","sspBidId":"","isStaff":"false","whyThisAdLandingLink":"https://adreasons.yandex-team.ru/?hitlogid=7836278673971145680","sspId":"","pageLang":"1","detailedDeviceType":33,"productType":"media-creative","
2023-12-31 23:37:11 UTC	515	IN	Data Raw: 31 46 43 0d 0a 45 52 53 5f 46 4f 52 5f 41 55 44 49 4f 5f 43 52 45 41 54 49 56 45 53 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 34 30 32 31 35 22 7d 5d 2c 22 56 41 53 5f 54 49 4d 45 4f 55 54 5f 54 4f 5f 52 45 53 54 41 52 54 5f 4f 4e 5f 46 49 52 53 54 5f 43 48 55 4e 4b 5f 46 41 49 4c 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 35 30 30 22 2c 22 74 65 73 74 49 64 22 3a 22 38 34 32 37 32 35 22 7d 5d 2c 22 56 41 53 5f 41 54 54 45 4d 50 54 53 5f 54 4f 5f 52 45 53 54 41 52 54 5f 4f 4e 5f 46 49 52 53 54 5f 43 48 55 4e 4b 5f 46 41 49 4c 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 33 30 22 2c 22 74 65 73 74 49 64 22 3a 22 38 34 32 37 32 35 22 7d 5d 2c 22 56 41 53 5f 50 41 52 53 45 5f 43 4c 49 45 4e 54 5f 4c 45 47 41 4c 5f 49 4e Data Ascii: 1FCERS_FOR_AUDIO_CREATIVES":[{"value":"TRUE","testId":"840215"}],"VAS_TIMEOUT_TO_RESTART_ON_FIRST_CHUNK_FAIL":[{"value":"500","testId":"842725"}],"VAS_ATTEMPTS_TO_RESTART_ON_FIRST_CHUNK_FAIL":[{"value":"30","testId":"842725"}],"VAS_PARSE_CLIENT_LEGAL_IN
2023-12-31 23:37:11 UTC	7668	IN	Data Raw: 31 44 45 43 0d 0a 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 45 43 4f 4d 5f 43 54 41 5f 53 4d 41 4c 4c 5f 57 49 54 48 5f 54 45 58 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 52 45 53 54 41 52 54 5f 4d 55 54 45 44 5f 4f 4e 5f 45 52 52 4f 52 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 35 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 32 31 30 36 22 7d 5d 2c 22 53 45 4e 44 5f 44 49 53 41 42 4c 45 44 5f 41 44 5f 54 59 50 45 5f 49 4e 5f 50 4f 57 45 52 45 46 46 49 43 49 45 4e 43 59 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 65 78 70 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 38 30 37 34 22 7d 5d 2c 22 56 41 53 5f 41 44 44 5f 45 4e 41 42 4c 45 5f Data Ascii: 1DECE","testId":"878444"}],"VAS_ECOM_CTA_SMALL_WITH_TEXT":[{"value":"TRUE","testId":"878444"}],"VAS_RESTART_MUTED_ON_ERROR":[{"value":"5","testId":"892106"}],"SEND_DISABLED_AD_TYPE_IN_POWEREFFICIENCY":[{"value":"exp","testId":"898074"}],"VAS_ADD_ENABLE_
2023-12-31 23:37:11 UTC	507	IN	Data Raw: 31 46 34 0d 0a 75 49 4d 34 78 4e 4c 54 6e 79 31 4b 47 46 62 50 50 39 71 75 63 61 70 34 45 6f 64 79 5a 33 64 48 35 51 7a 47 50 53 53 38 75 78 39 31 5a 38 4c 55 53 39 6b 76 71 78 46 4e 4c 44 38 55 53 33 73 79 6e 4c 51 71 2d 74 47 61 65 63 6d 48 70 61 6b 49 64 39 62 34 53 49 4f 56 59 55 7a 70 6e 48 64 71 5a 59 38 72 7a 68 6b 54 75 50 58 56 53 38 61 61 56 44 55 30 62 74 42 41 39 44 53 6c 6a 4e 72 73 4a 44 78 7a 37 4d 52 45 75 53 61 4d 70 6c 47 44 5a 73 68 6b 4c 6a 2d 51 59 48 64 73 42 5f 58 70 7a 6b 36 7a 76 59 74 67 58 77 4f 68 2d 62 61 31 7e 32 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 6b 2d 72 6e 73 2e 72 75 22 2c 22 63 6c 69 65 6e 74 44 61 74 61 22 3a 7b 22 63 6c 69 65 6e 74 49 64 22 3a 22 39 37 36 31 30 34 32 30 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a Data Ascii: 1F4uIM4xNLTny1KGFbPP9qucap4EodyZ3dH5QzGPSS8ux91Z8LUS9kvqxFNLD8US3synLQq-tGaecmHpakId9b4SIOVYUzpnHdqZY8rzhkTuPXVS8aaVDU0btBA9DSljNrsJDxz7MREuSaMplGDZshkLj-QYHdsB_Xpzk6zvYtgXwOh-ba1~2","domain":"mk-rns.ru","clientData":{"clientId":"97610420","clientName":
2023-12-31 23:37:11 UTC	7676	IN	Data Raw: 31 44 46 34 0d 0a 37 59 47 76 4c 6e 4d 73 32 31 62 4c 58 38 44 76 6e 39 34 63 52 52 77 36 68 36 70 45 31 44 4f 7a 63 54 31 4a 41 67 73 38 69 4e 6d 57 4d 73 36 47 41 4e 44 30 39 61 6c 68 6b 67 78 37 59 36 61 4f 79 48 31 75 31 61 69 4a 71 75 65 4f 66 66 6b 32 6f 30 72 33 30 45 51 52 42 4b 71 7a 30 51 57 63 54 74 68 74 5a 68 78 69 6e 54 57 53 65 56 6e 75 58 77 6b 67 33 53 6e 5f 5a 76 6d 61 53 4f 42 6f 4d 72 68 4e 7a 4b 4f 64 49 50 6f 57 6c 37 51 76 66 36 79 69 4c 6f 67 4c 49 63 69 46 42 6f 35 69 6c 72 48 2d 35 44 61 68 4d 71 71 63 75 58 71 38 5f 42 43 55 57 30 47 79 4a 7a 35 64 58 70 30 36 54 4e 54 66 6c 30 4a 39 74 6c 53 4b 69 5f 70 54 6b 69 49 64 30 6d 30 30 7e 32 22 2c 22 70 75 6e 79 44 6f 6d 61 69 6e 22 3a 22 6d 6b 2d 72 6e 73 2e 72 75 22 2c 22 70 6f 73 Data Ascii: 1DF47YGvLnMs21bLX8Dvn94cRRw6h6pE1DOzcT1JAgs8iNmWMs6GAND09alhkgx7Y6aOyH1u1aiJqueOffk2o0r30EQRBKqz0QWcTthtZhxinTWSeVnuXwkg3Sn_ZvmaSOBoMrhNzKOdIPoWl7Qvf6yiLogLIciFBo5ilrH-5DahMqqcuXq8_BCUW0GyJz5dXp06TNTfl0J9tlSKi_pTkiId0m00~2","punyDomain":"mk-rns.ru","pos
2023-12-31 23:37:11 UTC	499	IN	Data Raw: 31 45 43 0d 0a 22 6a 35 32 36 30 63 62 63 36 20 63 61 33 39 63 31 35 39 38 20 68 63 35 62 39 39 36 34 36 20 61 64 31 39 30 66 62 64 38 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 6e 2f 63 6f 75 6e 74 2f 57 66 69 65 6a 49 5f 7a 4f 6f 56 58 32 4c 61 68 30 73 71 4b 30 38 44 5a 58 59 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 45 36 45 72 2d 5f 75 5f 4d 36 45 72 6d 51 4c 31 67 72 32 44 49 68 43 6d 67 7a 53 6e 30 73 32 58 30 7a 6b 42 43 64 58 76 77 75 64 4a 2d 76 5a 4b 6b 64 4b 4c 6c 77 62 44 75 76 66 43 75 78 2d 64 70 59 4a 6e 69 41 70 51 54 47 77 54 43 50 70 56 37 65 56 55 56 74 4b 76 67 5a 41 65 48 61 46 4a 38 6f 32 59 41 6e 58 33 47 59 67 47 59 66 66 61 37 34 6a 30 45 63 52 43 Data Ascii: 1EC"j5260cbc6 ca39c1598 hc5b99646 ad190fbd8\"><a href=\"https://yandex.ru/an/count/WfiejI_zOoVX2Lah0sqK08DZXYOQbKgbKga4mGHzFfSxUxRVkVE6Er-_u_M6ErmQL1gr2DIhCmgzSn0s2X0zkBCdXvwudJ-vZKkdKLlwbDuvfCux-dpYJniApQTGwTCPpV7eVUVtKvgZAeHaFJ8o2YAnX3GYgGYffa74j0EcRC
2023-12-31 23:37:11 UTC	7684	IN	Data Raw: 31 44 46 43 0d 0a 4d 31 36 70 42 32 47 50 6c 45 59 71 54 6d 4d 33 44 69 4e 52 35 4a 32 63 41 68 42 52 35 5a 31 73 58 6b 70 71 59 5a 64 30 66 41 31 46 79 34 75 6d 43 79 34 4a 36 63 34 63 62 32 61 57 69 54 46 36 61 39 69 4d 37 36 36 2d 47 2d 30 50 42 34 72 43 41 73 41 4f 52 57 65 59 44 6d 6d 31 63 36 2d 73 44 46 4b 79 62 5f 64 74 7a 53 4b 55 54 68 30 56 68 5a 36 76 76 4f 43 6c 56 36 64 5f 6a 79 38 4d 73 6c 54 4d 73 34 42 78 4e 30 6a 5f 4c 56 78 45 30 35 52 38 72 70 67 50 7a 66 7a 72 43 6b 72 43 79 75 4f 6a 70 33 38 37 4e 62 74 4e 54 49 6e 6a 58 6c 36 49 53 69 47 39 74 49 57 30 72 55 48 45 78 70 62 71 72 6a 53 48 51 62 62 76 69 74 56 71 50 49 2d 63 62 67 74 70 50 32 5f 36 76 57 5a 62 6e 78 47 37 78 74 31 4c 6a 4f 37 76 52 71 70 52 63 66 38 74 78 70 72 6f 61 Data Ascii: 1DFCM16pB2GPlEYqTmM3DiNR5J2cAhBR5Z1sXkpqYZd0fA1Fy4umCy4J6c4cb2aWiTF6a9iM766-G-0PB4rCAsAORWeYDmm1c6-sDFKyb_dtzSKUTh0VhZ6vvOClV6d_jy8MslTMs4BxN0j_LVxE05R8rpgPzfzrCkrCyuOjp387NbtNTInjXl6ISiG9tIW0rUHExpbqrjSHQbbvitVqPI-cbgtpP2_6vWZbnxG7xt1LjO7vRqpRcf8txproa
2023-12-31 23:37:11 UTC	492	IN	Data Raw: 31 45 35 0d 0a 63 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 29 2c 63 6f 6c 6f 72 2d 73 74 6f 70 28 39 30 25 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 29 29 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 39 30 25 29 3b 6d 61 73 6b 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 Data Ascii: 1E5c{-webkit-mask:-webkit-gradient(linear,left top,left bottom,from(hsla(0,0%,100%,.6)),color-stop(90%,hsla(0,0%,100%,0)));-webkit-mask:linear-gradient(180deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 90%);mask:-webkit-gradient(linear,left top,left bottom,fr
2023-12-31 23:37:11 UTC	2433	IN	Data Raw: 39 37 41 0d 0a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 7d 2e 76 64 31 33 35 39 33 30 63 20 2e 74 63 38 38 36 35 32 31 63 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 31 35 30 70 78 29 3b 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 31 35 30 70 78 29 7d 2e 61 61 63 63 65 34 30 31 37 2e 6b 38 36 35 62 39 35 32 65 2c 2e 61 61 63 63 Data Ascii: 97A-webkit-transform:scaleX(-1);transform:scaleX(-1)}.vd135930c .tc886521c{-webkit-mask:linear-gradient(270deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 150px);mask:linear-gradient(270deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 150px)}.aacce4017.k865b952e,.aacc
2023-12-31 23:37:11 UTC	5265	IN	Data Raw: 31 34 38 39 0d 0a 2c 2d 6f 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 31 30 30 25 2c 31 30 30 25 20 31 34 30 25 2c 61 74 20 30 2c 23 35 65 64 35 30 30 20 30 2c 23 32 30 61 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 33 38 2e 37 32 64 65 67 2c 23 65 62 66 66 30 30 2c 23 38 66 30 30 66 66 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 36 34 2e 38 32 64 65 67 2c 23 61 64 30 30 66 66 2c 72 65 64 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 36 35 2e 30 33 64 65 67 2c 23 30 66 66 2c 72 65 64 20 39 39 2e 37 39 25 29 2c 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 36 37 2e 30 38 25 20 31 30 30 25 20 61 74 20 35 30 25 2c 61 74 20 31 30 30 25 2c 23 66 66 30 30 63 37 20 30 2c 23 Data Ascii: 1489,-o-radial-gradient(100%,100% 140%,at 0,#5ed500 0,#20a 100%);background:linear-gradient(238.72deg,#ebff00,#8f00ff),linear-gradient(64.82deg,#ad00ff,red),linear-gradient(65.03deg,#0ff,red 99.79%),radial-gradient(67.08% 100% at 50%,at 100%,#ff00c7 0,#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50091	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:10 UTC	2509	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065828%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:11 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:11 GMT Expires: Sun, 31-Dec-2023 23:37:11 GMT Last-Modified: Sun, 31-Dec-2023 23:37:11 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50093	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:10 UTC	2448	OUT	POST /watch/3797907/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A219434223%3Arqn%3A3%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C566%2C1934%2C553%2C3%2C0%2C%2C1274%2C6%2C5098%2C5098%2C1%2C4356%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Afp%3A2678%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065828&t=mc(p-2-h-1)clc(0-0-0)rqnt(1)lt(71300)aw(0)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%222757811704065824348%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:11 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:11 GMT Expires: Sun, 31-Dec-2023 23:37:11 GMT Last-Modified: Sun, 31-Dec-2023 23:37:11 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50094	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:10 UTC	841	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 302 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:10 UTC	302	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 37 38 31 36 36 32 34 38 38 31 31 34 37 32 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 37 38 31 36 36 33 36 34 36 37 39 31 32 30 22 2c 22 49 6d 70 49 44 22 3a 22 33 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836278166248811472","Duid":"1704065783133633243","RtbBidReqID":"7836278166364679120","ImpID":"3","CryptaIDv2":"0"},"Vari
2023-12-31 23:37:11 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:11 GMT Expires: Sun, 31 Dec 2023 23:37:11 GMT Last-Modified: Sun, 31 Dec 2023 23:37:11 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50092	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:10 UTC	669	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:11 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:37:11 GMT Expires: Sun, 31 Dec 2023 23:37:11 GMT Last-Modified: Sun, 31 Dec 2023 23:37:11 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:37:11 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50099	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:10 UTC	392	OUT	GET /get-direct/4797247/ixuJwznszqKVxLJ3r4kPqQ/y150 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:11 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:11 GMT Content-Type: image/jpeg Content-Length: 8309 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sat, 11 Nov 2023 14:53:40 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 561361b5667b058e NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:11 UTC	8309	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 96 00 c7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 02 08 01 09 ff c4 00 41 10 00 01 03 03 02 03 04 06 08 04 05 04 03 00 00 00 01 02 03 04 00 05 11 06 21 12 31 41 07 13 51 61 14 22 32 71 81 91 08 23 42 52 Data Ascii: JFIF``C!"$"$CA!1AQa"2q#BR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50100	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	392	OUT	GET /get-direct/5146926/b8_SoKGCJf1bxAcZNxExjQ/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:11 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:11 GMT Content-Type: image/jpeg Content-Length: 6465 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 25 Aug 2023 11:51:41 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: eed7420b269a51c2 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
2023-12-31 23:37:11 UTC	6465	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 87 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 07 00 04 05 06 08 03 02 01 ff c4 00 4e 10 00 01 03 03 02 02 05 08 04 09 09 06 07 00 00 00 01 02 03 04 00 05 11 06 21 12 31 07 13 41 61 71 14 22 32 51 81 91 a1 b1 08 15 42 Data Ascii: JFIFC!"$"$C"N!1Aaq"2QB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50101	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	5010	OUT	POST /count/WRmejI_zOoVX2LbE0NKD0CCNMnv4emTH1i7aTxpUS8VhTx8wZbvdjwCypYaklQSJ262ha9DbwZesH_SVpFv3Oma3w3XLf4LAppm34Oviy9oGNcTmiCmENn0wU7qREClDTdcdspGsUTYKxJhwd2AHGBBMGB8c_IG1KMzaiFcp5oTzJ3c-2TbY0xRnAfLAfTB2013Ox0YIdAiAMuICAcAZ-oWiyLzZOw8MH0vc0ZY89spWQXYVnVdGQjYRPt4-j1gslePSfT4oQR8sDFeoWpb3e-T1fpZd3I1SmWaS09SEGEi3o3O6e6_1OFPcMKWoUD5fxme6xH2vYSlxrU94V86RukqA65CLsMrBKwPHsPm9h7FWWrAfj2B-0SItm21JHija9r38UWewhUiwDaPCmuWPqEewZ7S8N47mh6H53DDDGUI68G3ppPQcdkSslykovkv_8mTUNTTrB6ssu9U7hQCR8wzFIx0AihJHS9xEBfVqZLbxU2c00kNtiVr-YRGcbW4K_2-R3FisOZzmYWGULk-BF238RWvRH2i-ZzfG3nUlDpN_eXA-ZL5LDdVxVkzURck8DV_UOc4J_gI55mtLGZG0~2=WQaejI_zOoVX2Lae0TqC07FNMKqGu1WGNmYmP11U3p-2WE2QQ5GgGJ3vBYjUpFR7HYvOEuqrEsLQto4lzPqnzFbSxkpPVkVETttjV9NDcS0w1puebKehuXz0V0iCEeu-y4duxT58sDoKpfQwrWrZ4-jcUTBIsJ7rwb60Tkf5LO1swiMZ0EtKQwe0hHtbSKvnwJsTG03Rr8j7pjV4MF40c2qMRkHqXRp6abSuWC9kOEFyxC4qZiCwY_EXrR0tp-9yQ3LiwQcQijSoQXcf4JkWOtMzHj_0fEc9t-AIBL1ek5Cl7W5iCO0LIQ3BavcjXQSfM6B8pI5m1S6paXKnJ7TPrkGo-TI-U6S9-8UzzWdymHMY6F-tGXJZzvB0utxjJbdSpyvqCSl-pFpIIo-EL192UiUHIZ98RtqTOHoMDpFtVDc_VT7QFTaJWU8IwSS6Q2ETdFblqHAkC3o_fNLTPrp25ORdjVvCa0bYsMSncF6ye9gUM8tH1rnf4ZD14FmGy2t_Zw36xL_lQDx8B7DlCmZ8Iy4zqRXgq4eNx5P9WboII1YIGJFjMYbE6MNGHG00~2=WP8ejI_zOoVX2LaL0IKC0FDLL4qGu1WGNmYmP11U3p-2WE22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsCLN2CeTvf0dy_bpfxjT-wyuSvNsPm9h7FWWrAfj2B-0SItmA3ZQEA9bfQMbfQMpewfLuy2j5ClgWAqKoyU1MYdNbC5QEqeZtEAI-_f10BOfbuyShuce8oekthWja5EbmW9Mg3_4HVNfKcGGYaXD_jELes555ZgS1PX2Jwq42cVnVdGQjYRPt4-j1gsz5HDUOP9qnE_nILReD1mfruy0jXYs8iaqEN9pFPFaNc98JU7m1K4pqfMn33TPLcJkzHp-k8ENzyVfW6aweCdhEtzxuIrlU_TWUJwMfqw7JyR8uLPzcVcbrvwcSkTmdO99BtxEa8YPMzcuSioXNs0dkp1J5gIVcp0OHmWc_yY9Pg11VsMrdNTCT4CBEYrlYtHgzZciynobY8jm4uN5iuG_CgEO_wqTNbGHoy8a5QPNnolkcyZoD0BQZedBQfRSf8j2-O1QfSxxOufJfc0mKK0~2=WQqejI_zOoVX2Lao0VqC05CNMaqGu1WGNmYmP11U3p-2WE22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsCLNIAKEqsWp-ToPy_sEtVUSEUhRCu4rZdmGQbKMX7_0E9ROD1nz4Y2H67HKWJAtPhErdC1meIiOum9EL9BPyVKgqS1sgaNLG7QgHUF0hHJhwa2j7QKnpd5fVTq0W5iKoyUELyJUtCF0805ai6SBWmvHnq1KBbF5nRmCRatugulyIpEXrR3tZoByw7LiAMdQie-Y_ZLfKRiWAxlUes-WKdJ4x_59LkWq72dNZm2s6Bm5acWovEPRGKcF8p4a9j3u0g2PoKhOfZkigp9PHOPV_7q2-g7lI5NaW-MOPJolpACKhvtH9F5hnL1HlMppIdCiZypl_JIsrpkDcDSKFJEpFDbByQ5oFLaVyO5aSgFGy1X5MRzzxfdPjMrPsRLvRK-B72GROdFUYmwekwU678TcRpkesHjoHDaEWSPqq-lBG0Y0n3y5fRxO_uVGOtSlw96U-a0hx7lMMujTQc6EJybdu44HrooZD7jL5sbAYfZub3XbBFhHGO0~2=WPKejI_zOoVX2LaC0JqC05EMLKqGu1WGNmYmP11U3p-2WE22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsFeyxdSsRFzpftl-jhvAfipWNKEV50gbLR4Fu3u5XXq74qyqTBIqjBIqjanzUfHW7RgHLM0Tkh5em3jr6kg0AqTvN5ESUazdK00szIBHyxNH9KhDpWKgxgSBX4NDkr3cFd1wxc57hW-Y9QJL5WR6ThJpGudsOsBqNG-tp2Hq059jeNmBCw7LiFUF8lpeTMmtS2awOdVuf8jK6YuKoyU0Mmnx4KIwF9aPal_g53s5RHsG6B8pIpCTmXSGV2iP4KCqrsMDRaq4welfb3s_d02HxW-kEabxt-RNlA-jmCR-MjlzlP-LeQ9MQQNtfZbpc6VZADtNqUuXT2RbrXVzcE6KMLFzdPYJe1-R40K8rgC_ejabuKIyrjQrtL7kooKcDVYwFqL-Yo5BVeMNG44E1jc0G_yXOnZ_fJMwwNrMLXsb-A2ZKj1emPpsE9TZzJZHvVMDujG0tlkEkNXb8-yimO0~2=WPWejI_zOoVX2LaO0LKC07CMLaqGu1WGNmYmP11U3p-2WE22OF9TLhoOxO-DNB1s6cjsohI-GrxgEsFeyxdSsRFzpftl-jhvAfipWNKEV50gbLR4Fu3u5XXq74qyqTBIqjBIqjanzUfHW7RgHLM0Tkh5em3jr6kg0AqTvN5ESUazdK00szIBHyxNH1Dc25kCED6SRb4Luf4FuV_1wprm5KYROcQrDHKOUBDRfQIWaiJH3c5oOj51U1RdGwjXRvx5-T1gsD9JDUKP9arF_1QNR852mvrwyGXWcs4laa2N9pFR6CCZKcB8pI5m1S6paXKnJ7TPrkGkgH2_E6U8bnykGOxxmJ7Rx__6RB_VcyDrvMjpj98_6xF6BFipyqillHIMUm16fFBetTSHCfQzcPddonwjJ5BIatqHhIz9FpQ0SMmlyzyakY5eUtvBwxgkXMu8sfxNUZSp4UwMp_g_IIcCHTRqg4pH7AumxN433_o5ZsF-KjTQF-vOaqRukipWXe-0GYogSSYuhcamw71954fmE-rtdPZYb0bUNGG0~2?stat-id=1&test-tag=401871500083281&banner-sizes=eyI3MjA1NzYwODg4NDkzODk3OCI6IjE1MngyODAiLCI3MjA1NzYwOTQ0NjA2MDA3NyI6IjE1MngyODAiLCI3MjA1NzYwNzgwNjA4NDIzOCI6IjE1MngyODAiLCI3MjA1NzYwOTQwNDg3NTE1NCI6IjE1MngyODAiLCI3MjA1NzYwOTUzNzM1MDUwMSI6IjE1MngyODAifQ%3D%3D&actual-format=14&pcodever=937691&banner-test-tags=eyI3MjA1NzYwODg4NDkzODk3OCI6IjY0NzIxNyIsIjcyMDU3NjA5NDQ2MDYwMDc3IjoiMjgxNDc1MjQ5NTk0NDE4IiwiNzIwNTc2MDc4MDYwODQyMzgiOiIyODE0NzQ5ODExNTg5NjMiLCI3MjA1NzYwOTQwNDg3NTE1NCI6IjI4MTQ3NDk3Njc2ODAyMCIsIjcyMDU3NjA5NTM3MzUwNTAxIjoiMjgxNDc1MjQ1NDAwMDg1In0%3D&constructor-rendered-assets=eyI3MjA1NzYwODg4NDkzODk3OCI6MjEyMSwiNzIwNTc2MDk0NDYwNjAwNzciOjY1NzM3LCI3MjA1NzYwNzgwNjA4NDIzOCI6MTExNDMwNSwiNzIwNTc2MDk0MDQ4NzUxNTQiOjIwMSwiNzIwNTc2MDk1MzczNTA1MDEiOjIwMX0&width=781&height=280&confirmTime=-1&confirmRatio=1000000&wmode=0 HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:11 UTC	528	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:11 GMT Expires: Sun, 31 Dec 2023 23:37:11 GMT Last-Modified: Sun, 31 Dec 2023 23:37:11 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:37:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50095	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	378	OUT	GET /favicon/easypay.world?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:11 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:11 UTC	844	IN	Data Raw: 33 34 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 0c 49 44 41 54 78 01 bc d7 03 ac 24 5b 14 46 e1 b5 ab cf b3 6d db b6 6d db b6 19 3d db b6 6d 85 cf b6 6d 7b 6c 4f 57 ed f9 93 5c 76 61 4e 5f ad e4 9b b9 de dd e5 63 44 e4 ee 53 02 cb cb d6 b2 89 2c 2b 73 4a 10 45 2a 03 e5 7b 79 43 5e 90 2f cd 6c 3c 54 67 54 0f 9e 02 58 57 0e 93 cd 65 2e 49 a8 2e 93 81 f2 ba dc 23 6f 9a d9 04 4a b2 8a e1 0b 02 a7 cb fe 32 0b 5d 6b 84 3c 2e 97 9b d9 af d1 2f 40 c3 d7 03 ae 91 35 e9 99 be 94 d3 cc ec 55 1a 4a 0a 86 6f 05 3c 10 3f 3c aa 95 e4 3e 77 df 99 86 ac 61 f8 ba 2d c3 17 a3 43 5f 7c 3b 82 37 de 1f 02 46 5c 0e 9b ac 3b 1b 2b 2d 3b 03 0d fd 23 07 77 dc 12 d6 61 f8 fc c0 e3 b2 2e 0d dd fb c4 3f 9c 7d Data Ascii: 345PNGIHDR szzIDATx$[Fmm=mm{lOW\vaN_cDS,+sJE*{yC^/l<TgTXWe.I.#oJ2]k<./@5UJo<?<>wa-C_\|;7F\;+-;#wa.?}
2023-12-31 23:37:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50096	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	375	OUT	GET /favicon/compday.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:11 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:11 UTC	999	IN	Data Raw: 33 45 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 a7 49 44 41 54 78 01 d4 d7 53 94 f4 48 14 07 f0 4a 55 3c ed d5 78 6d db b6 8d e7 b5 6d db b6 6d db b6 6d db 68 24 e9 38 7b ee bf 92 73 f6 f3 e3 e6 bb 83 df b0 fa 22 2a 85 4d 23 76 bb ff d3 79 49 c3 b6 77 26 35 43 5f 95 e4 9c 2f c6 64 24 f4 29 4d d3 0f c8 c8 0f 9e 20 03 cf bb 9c bc 64 d3 f9 bf 99 da fa 9c fd cf a1 4c a5 f2 fd 49 ab 5a 3d 91 5c 67 44 58 e4 cf 29 60 cb 35 39 1c ab 08 f8 fa 6f 7d d8 70 ff 80 1f ff de 73 c8 77 3b e2 18 f2 ac 2d 96 38 bb dc 1d d8 ee e2 c7 75 72 ee 19 cd c7 c9 f1 a1 59 56 25 e7 19 6a e2 f7 4b 0e 55 a1 ae ab 90 2b 13 e6 7e e3 1b 3f c1 57 df fd 1a ee b1 ea 20 fc f8 eb ef e1 bb ff b0 47 c9 af 7a 62 53 f2 f6 dd Data Ascii: 3E0PNGIHDR szzIDATxSHJU<xmmmmh$8{s"*M#vyIw&5C_/d$)M dLIZ=\gDX)`59o}psw;-8urYV%jKU+~?W GzbS
2023-12-31 23:37:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50102	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	2366	OUT	POST /watch/95527089/1?page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065830_fd706684ca2d1a0b1e9f543f9811d9d4df0dbd2457b79def74d80cd18b0be523&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003710%3Aet%3A1704065830%3Ac%3A1%3Arn%3A925768434%3Arqn%3A7%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C273%2C%2C%2C%2C102%2C3%2C2639%2C2639%2C1%2C2392%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065826699%3Afp%3A2138%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065830&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)aw(1)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%228664901704065829155%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:11 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:11 GMT Expires: Sun, 31-Dec-2023 23:37:11 GMT Last-Modified: Sun, 31-Dec-2023 23:37:11 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50097	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	382	OUT	GET /favicon/expert-massage.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:11 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:11 UTC	1645	IN	Data Raw: 36 36 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 06 2d 49 44 41 54 78 01 c4 97 03 b0 ec 4a 10 86 7b e6 f8 1a 07 d7 b6 6d db 36 0f 9e 6d 14 9e 6d 1b d7 b6 6d db b6 6d ed c9 6e e6 fd 9d d7 5b b5 95 ca 3d 78 ec aa 6f 67 92 9d 4c f7 74 f7 74 26 8a 32 22 8b 4c 24 19 2a 8f 5e 5b 45 a6 85 21 55 0e fd 3c 80 e5 36 29 ba 81 ff af a0 bf 0f ac 07 4b 49 d3 21 6a a9 02 94 8e a8 0c 28 ae 87 5e 12 68 07 b2 82 43 f1 fe 9b 87 4a a7 5e b8 5a 3e f5 bc 1d 6d 5b 11 04 b9 a7 23 ac e3 e1 b9 f5 a1 c8 78 7d 2c 32 8f 1f 46 1e e0 19 60 c8 1e 31 24 93 06 2c 34 c5 f0 fb 0c 48 06 14 63 ac 55 2d 6e ed df db f2 f6 7e 9d 10 b8 11 4d 21 02 65 b9 0d 51 01 74 0b 02 ba a3 23 8f 6d 8c 29 76 60 41 d6 f2 57 4f 44 e4 de 01 2d Data Ascii: 666PNGIHDR szz-IDATxJ{m6mmmmn[=xogLtt&2"L$*^[E!U<6)KI!j(^hCJ^Z>m[#x},2F`1$,4HcU-n~M!eQt#m)v`AWOD-
2023-12-31 23:37:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50098	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	376	OUT	GET /favicon/deart-13.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:11 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:11 UTC	2151	IN	Data Raw: 38 36 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 08 27 49 44 41 54 78 01 ec d6 73 7c a3 f9 d6 00 f0 13 27 f5 76 6d db 36 c7 f3 be f7 ae 77 c7 f6 14 93 2a 6d 54 77 6d db b6 77 c7 6a 47 41 1b 73 cb a0 d8 c6 c9 93 47 e7 3e b9 be 99 6a f7 ef fd c6 78 74 ce e7 77 ce 81 3f 8d c7 a3 7f 7f 9e 63 cf c2 69 c0 41 87 b6 04 3d 2d 48 38 5a 36 c2 24 88 be fa 55 18 78 18 29 73 ad 1c 38 86 af 36 dc ba f9 93 5b 1e 84 df c3 fc f3 83 3c d2 a2 c0 a8 be f2 c5 de 9d ab 1b d1 ff 24 8e e8 4a 7e fd e0 d5 8b 64 30 89 75 cb 2e 10 76 7d bf c6 89 e1 a7 d0 fa d3 ea d6 11 7d e5 d3 b4 ab 15 7f 79 77 b1 04 a6 8a 72 6a 67 a1 b7 11 69 7b bd 9f 76 b7 e8 68 8b e6 d3 98 4d 7e 39 4c d1 c1 cf 57 5f 8a dd f5 1f 91 dd 8d 87 08 Data Ascii: 860PNGIHDR szz'IDATxs\|'vm6w*mTwmwjGAsG>jxtw?ciA=-H8Z6$Ux)s86[<$J~d0u.v}}ywrjgi{vhM~9LW_
2023-12-31 23:37:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50103	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	10716	OUT	GET /meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&pcode-test-ids=918197%2C0%2C7%3B913082%2C0%2C43%3B909920%2C0%2C89%3B920185%2C0%2C73%3B928075%2C0%2C67%3B917806%2C0%2C70%3B928664%2C0%2C3%3B931546%2C0%2C61%3B917804%2C0%2C60%3B892904%2C0%2C98%3B923323%2C0%2C63%3B923613%2C0%2C84%3B925137%2C0%2C25%3B935790%2C0%2C0%3B912284%2C0%2C48&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiQ4IGhbSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5ok8zmwRFl9gHQl9On4S%2BLSzKoYcWvFClVQ5a0URUXinVqSbqOisXrt18Wv21uPm0XrxdSjHTxYvG4%2FfjI3sNzkoRhlC6%2B%2FvziANMLXo6FHBTvVE%2FGgToRUj%2BPQoNQsoEsG6oKPnZSCVoyQQsJOyF978YIvCgK9ruAJVU7NpIJ3jSA1kn8QIW6IrJY0VJJ1lLFq2qg0o0bBl56OJ2gUqzxVB2VV1xcKCoEd%2FsnjZMozfcIsHpxAU5e81GqoeHwg72hagkHLolgdHCDpZkf%2BRoMT4AYvaD6kIfjXrKScmV%2FP4PzPfg3w8vDPPXO4C3HqgLX0baXa9Wwlp2CfjPiZU9Y%2BdfvsBrh8%2Feidpirf%2FFO%2FwTzh%2BLzPOb%2FzwPfG31M9lqQpWpoV8vVzAiKNTs2y7zMS6O9Ge00CUhBoFQu2TCSxvAKshK9llR08E05uCkh84PE%2Bw5Q%2FcVAKqoqQVo3dek1DD0IgTwzwBtAWLCgRDLtCUIA9qBRyVgyrgpBiWSXZ0o9i7zAj%2Ffbn4IkOZDQIImQSEMVE7BQsRq7C1UR1swQ43nEsyhIgwMgkRJjOnwLYugChLMC6xYNo0DdDa3Bm6yruLpaMc3o3SWFJUzyo3%2FOnD72suyId7sSkpAs0QWkRCQ2wBejaHDTV3TJz3kz9aIDC9cUzjgOkrfqsiX93ruXpBnnEU9O6iZL4jA5NBpaAEQhiUmaljSNextpFkXRU2ttqa6YXCkJufgtGFPs2lFCXwNnPG1J8cw8D3wv0eYDeFXZlltiusp1T7Ht9%2FyKClpVrIBgFusZ2PaPf8%2FhZqVLynKqtJ7U0GJ7yaAqTCFgqml3N6y7cJ8xz3Pb56Z23lEtT6biwdC79pX7HmgCjdAXvKQ%2FiDEALwB1dEND0M0Qt550cDKAcyNkSRbsETQt4EbWBPL5WpHOaRz4ie%2FNnLAcFSsw4XWmcA4k7SbBPPSz8FCjFYM068dlwwpFBhA%2Fw7dxah5GWZDMoi0h%2F1h5FOGzwc3DJPEOwYX0xXSBmh7AoTNLeNMPwrkt9Ip4phWtRiwG4XJmnPtQN9pQ9zajbNXYsYpBQFkHHqhIQd0YWWDFIGYSVAgU30o1vGaFyy6BGCTRbNMQTAH10UkrCLFxD5CXtFPDSQyegOW%2BLf8CSYN3EzlWcATFdNOCPZGSOlMzSbM8MYyImVWB9uzKZm2aHpLAqeR22y8vtJA1%2BWRIHjCgTpbcjZJHtoEiSkOhPAGhddokWZSY%2FDlyWy1AqJV0uJDcve8sifzw2H%2BaMKFNAcgRXgfSHEqtYvUIcwhUHs4jBQXacLo19b0ojSdFYNJEjqKz4YH2CNGWK8HHeuWsktT3p47VkDdrHVGlqezY7MviH9vHd7%2B2m4cPu7vFaz%2F2Xixu73%2FZ3WyHd5ub3d2Hxevg6ww1hhw2hNRi2%2FhppCMFAujVskFl1LB5Z367uN3sbl49fIK9%2FWdz9377B3z%2B2%2B5282H7cfbVh82t%2Fub95%2B2deX3z2%2B7x3ny8fXX08P5uZ79F5D0CfPGw%2BXxz%2F%2FlX%2B%2BvPD%2Bb%2FTw%2BbV3fb3z8%2BeeGfm%2FvbnTb9%2BfkjdobmWypq%2FFkyoiSpB2f8wiCwyaXLgkLsoV0Uuo25DePQs1QP6qKkFQGeMV2wG9slddJTGvuhFc56YNYjL%2FZPmMFpYSoSRCsD7jgDk3rxvt%2BQskV2qjXlsLIiT8M781wWx7ltOLMKPq4LycdiZaqj4YPeoREggv4dePhMdUDxRUbWraEXQngK4%2BJlwyH5oIJBLUr6TBaKl%2BxlEOU%2BjA4vfYA8fg5OnsOT50g%2Fk5dBDGNQGoD98akzL09809MqBj25JL3OGjOXj7VT%2FfhxFEdH5YTCkrUYc%2FS%2FyT8nQOxHuQGoBogVh%2FGDXbstwtDyl01vSE4cZpA2idbweN8BLR0yvhvdUFFu9c2KiFLLJIMyQP5KUqyc1lAqSbLvhnUvFaQI6%2BU5I3te3XLxCByVh00G3bf01dOZNpiB7EzCZ4CsuumJdO%2F%2BYH%2B4dGqxZIyUn6%2F%2BNs%2BRVtLgRQ7uj7wweZGEOTB9GM9SKQMKyGegdhBC0fZjuKHxmhXXmF2o3guIm1tJZ3Fqs1vQlmO6ACksnVSWZUlgm3I1TD11GhQUFKhqCU4JkObu0cD3svwMnehRrkDpyTWpoKQUrF7BJzheQytpZnECJHxmsSTwbTaOAn2OZeg%2BJ9hk4Z4tbTnVhuawgLREdkp0z4tj7zgw05zLewARcglaiChQAtUJn02BB7Qp9DNWyr0gyc15jELEHQoK7RpGiOVaPzL37OGlvhUQ%2BmXNSmApsFLs1WyNbWHmo7dhAnZePt8LCF9vygdBryDpqJkW3fNL4HmG7K3aZp1eEvsbaWzRgsf5EtQweA1IADZHa%2BfACaixvem1wnc%2FWempCLkIbzZwUHPjhEF8mIz2l90AhwORk3zANoqzOXloYacFIxLo6STzBCAObeahMyaQ6RoCmaLkxdjigDA5Ze8mNzBenLhUeQVNRpwbW6FT%2BucqF%2FH310Zam7CGyf02nfihF2f2DgK1TcmRUNwWPvCYsVjxsSnNVaf2uvH%2FNNPraex4n8BfrO4OM4ms50SyublR9w%2B77d3j5nF3f6fe3eze%2FWvzy812vn4Is%2Fzx%2Brbeny40G4BOF3tyrD3siaMt%2FHRDdA7EUl%2F5ZgrMBW2oPJeEfjZ1K6tWIfkg3SgM8qc1ehTgfULS66IZQTO0gpyhIhh%2F7V2m2RyoBH6BLsP97hd1Q6RefrhnQpgVdAjssKy7sOWn71hLOXZnsi8NbPXqi0OUnZDCK%2Bam%2BjCFoj9I675fceCcYVzWgvROrQGmkR9NV26EXir%2FzKWRn6dHr89eBmry52%2BH3nNXTB0KOfxjgAQfYS%2BF9NTy7Bw1efkkCklZ8WvFBt2Yz%2BgxsPHtxcz0J8CWG0buBXPfq%2BQBiLFDevRkrYlPSwwBWtRIa8lOZp93jzdzR6SZvdg0i6OI%2FN8sgyyx9zMnVaiPoi9nqY418Npa343YIcGJCpQVJX96qpnpw%2Fb9k6PML4yuWAmuBDkiWXcywZ6sm%2BVBbo113wf%2FAYt05fN68WlnC4NwLmgOV51Gds5742yCBPPEDie2Oa9GckWZVUHuIOAIvN92seI4XZp4%2FATzDTDPzLykSPnDyc1inOoB9ut%2FAU19AWg%3D&pcode-icookie=ov0pI87eXrcREkH0lgvJEedIFAWRizuGVD%2BBgeQGBJgX1jC7e8ft0flwyvzyBFUtIQbeSUQUVH%2BiozgIAXTI1X64o5o%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=3&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=2757811704065824348&target-id=38218259&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.NzIwNTc2MDg4ODQ5Mzg5NzgKNzIwNTc2MDk0NDYwNjAwNzcKNzIwNTc2MDc4MDYwODQyMzgKNzIwNTc2MDk0MDQ4NzUxNTQKNzIwNTc2MDk1MzczNTA1MDE%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A509%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A5%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A1%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B2228892376093%5D HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:11 UTC	757	IN	HTTP/1.1 200 Ok Access-Control-Allow-Origin: * Connection: Close Content-Type: application/json Transfer-Encoding: chunked X-Yandex-Req-Id: 1704065831672988-996699316857204242400370-production-app-host-vla-pcode-207 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:11 GMT expires: Sun, 31 Dec 2023 23:37:11 GMT last-modified: Sun, 31 Dec 2023 23:37:11 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=an.yandex.ru; path=/; expires=Sun, 07-Jan-2024 23:37:11 GMT; SameSite=None; Secure ssr: true strict-transport-security: max-age=31536000 timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:37:11 UTC	5304	IN	Data Raw: 31 34 42 30 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 38 38 34 36 37 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 37 39 33 34 34 31 34 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 Data Ascii: 14B0{"impressionData":{"currency":"RUB","revenueUSD":"0.000088467","precision":"estimated","revenue":"0.007934414"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836
2023-12-31 23:37:11 UTC	72	IN	Data Raw: 34 32 0d 0a 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 34 37 39 37 36 39 31 2f 6b 48 6f 79 5f 6f 53 62 35 5a 63 77 53 6d 72 38 36 5f 2d 37 39 51 2f 0d 0a Data Ascii: 42/avatars.mds.yandex.net/get-direct/4797691/kHoy_oSb5ZcwSmr86_-79Q/
2023-12-31 23:37:12 UTC	5974	IN	Data Raw: 31 37 34 45 0d 0a 77 78 36 30 30 22 2c 22 36 30 30 22 2c 22 33 33 37 22 2c 7b 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 22 3a 22 23 38 34 39 31 39 41 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 22 3a 22 23 39 36 41 32 41 39 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 23 46 46 46 46 46 46 22 2c 22 43 6f 6c 6f 72 57 69 7a 42 61 63 6b 52 69 67 68 74 22 3a 22 23 36 38 36 39 36 35 46 46 22 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 35 39 39 2c 22 68 22 3a 33 33 37 7d 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 78 22 3a 30 2c 22 79 22 3a 38 31 2c 22 77 22 3a 35 39 39 2c 22 68 22 3a 31 38 38 7d 2c 7b 22 78 22 3a 32 2c 22 79 22 3a 30 2c 22 77 22 3a 35 39 38 2c Data Ascii: 174Ewx600","600","337",{"ColorWizBack":"#84919A","ColorWizButton":"#96A2A9","ColorWizButtonText":"#FFFFFF","ColorWizBackRight":"#686965FF","smart-center":{"x":0,"y":0,"w":599,"h":337},"smart-centers":[{"x":0,"y":81,"w":599,"h":188},{"x":2,"y":0,"w":598,
2023-12-31 23:37:12 UTC	2209	IN	Data Raw: 38 39 41 0d 0a 47 6d 33 63 63 6f 72 44 46 53 5f 7a 4e 78 58 79 69 47 73 4a 62 58 79 36 4f 6b 6c 6e 6d 48 55 59 31 46 78 6c 58 49 59 31 74 74 69 58 49 6b 33 64 50 63 58 69 2d 74 6b 39 48 68 59 6c 76 4c 61 43 5f 44 61 49 5a 4e 31 43 79 72 41 47 4d 55 52 30 67 2d 6b 77 5a 67 4e 44 35 6c 70 6f 69 37 4c 71 75 75 73 4e 53 44 68 4d 6f 76 6c 7a 65 59 5f 78 38 62 39 4a 71 5a 70 50 74 73 73 54 78 6c 6f 75 30 47 79 73 38 33 41 43 4b 53 6e 5f 62 50 70 6f 30 32 46 7a 62 6a 50 72 5f 54 34 66 33 70 33 49 51 5f 73 52 75 58 47 57 35 76 2d 6a 5f 6e 59 6a 64 45 52 6b 67 69 66 55 7a 72 31 34 6a 61 6f 32 6c 32 61 49 4d 59 73 4e 7a 38 74 62 49 67 4c 49 51 55 74 58 6e 47 33 52 77 78 67 45 57 4b 63 30 79 58 43 39 34 32 43 70 44 49 4f 65 34 70 42 79 44 47 77 76 61 75 65 72 6d 66 Data Ascii: 89AGm3ccorDFS_zNxXyiGsJbXy6OklnmHUY1FxlXIY1ttiXIk3dPcXi-tk9HhYlvLaC_DaIZN1CyrAGMUR0g-kwZgND5lpoi7LquusNSDhMovlzeY_x8b9JqZpPtssTxlou0Gys83ACKSn_bPpo02FzbjPr_T4f3p3IQ_sRuXGW5v-j_nYjdERkgifUzr14jao2l2aIMYsNz8tbIgLIQUtXnG3RwxgEWKc0yXC942CpDIOe4pByDGwvauermf
2023-12-31 23:37:12 UTC	5966	IN	Data Raw: 31 37 34 36 0d 0a 35 30 38 31 35 39 26 79 5f 72 65 66 3d 66 61 71 2d 6b 61 6b 2e 72 75 26 79 63 6c 69 64 3d 31 36 38 38 36 32 30 33 38 36 38 31 38 38 35 30 38 31 35 39 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6e 2e 79 61 6e 64 65 78 2e 72 75 2f 63 6f 75 6e 74 2f 57 66 38 65 6a 49 5f 7a 4f 6f 56 58 32 4c 61 66 30 6f 4b 4b 30 32 43 58 56 59 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 44 54 4e 70 6a 56 6c 2d 46 72 58 5a 6c 53 39 51 47 48 44 41 57 71 51 58 36 65 72 6e 39 4e 41 7a 42 46 5a 48 31 4a 67 39 71 78 65 4e 62 6b 76 7a 37 79 54 5a 77 5a 55 48 75 44 61 4b 6a 7a 47 33 58 48 45 39 79 66 55 66 78 45 35 44 37 66 71 75 62 42 65 4c 30 79 77 64 6e 36 52 77 54 54 38 72 63 35 58 65 77 45 62 66 39 38 42 32 36 44 43 Data Ascii: 1746508159&y_ref=faq-kak.ru&yclid=16886203868188508159"},{"url":"https://an.yandex.ru/count/Wf8ejI_zOoVX2Laf0oKK02CXVYOQbKgbKga4mGHzFfSxUxRVkVDTNpjVl-FrXZlS9QGHDAWqQX6ern9NAzBFZH1Jg9qxeNbkvz7yTZwZUHuDaKjzG3XHE9yfUfxE5D7fqubBeL0ywdn6RwTT8rc5XewEbf98B26DC
2023-12-31 23:37:12 UTC	2217	IN	Data Raw: 38 41 32 0d 0a 74 65 6e 74 3d 31 35 35 37 34 30 32 39 36 32 39 26 75 74 6d 5f 74 65 72 6d 3d 25 44 30 25 41 31 25 44 30 25 42 30 25 44 30 25 42 43 25 44 30 25 42 30 25 44 31 25 38 46 25 32 30 25 44 30 25 42 34 25 44 30 25 42 35 25 44 31 25 38 38 25 44 30 25 42 35 25 44 30 25 42 32 25 44 30 25 42 30 25 44 31 25 38 46 25 32 30 25 44 30 25 42 34 25 44 30 25 42 45 25 44 31 25 38 31 25 44 31 25 38 32 25 44 30 25 42 30 25 44 30 25 42 32 25 44 30 25 42 41 25 44 30 25 42 30 25 32 30 25 44 31 25 38 32 25 44 30 25 42 45 25 44 30 25 42 32 25 44 30 25 42 30 25 44 31 25 38 30 25 44 30 25 42 45 25 44 30 25 42 32 25 32 30 25 44 30 25 42 38 25 44 30 25 42 37 25 32 30 25 44 30 25 39 41 25 44 30 25 42 38 25 44 31 25 38 32 25 44 30 25 42 30 25 44 31 25 38 46 26 79 63 6c 69 Data Ascii: 8A2tent=15574029629&utm_term=%D0%A1%D0%B0%D0%BC%D0%B0%D1%8F%20%D0%B4%D0%B5%D1%88%D0%B5%D0%B2%D0%B0%D1%8F%20%D0%B4%D0%BE%D1%81%D1%82%D0%B0%D0%B2%D0%BA%D0%B0%20%D1%82%D0%BE%D0%B2%D0%B0%D1%80%D0%BE%D0%B2%20%D0%B8%D0%B7%20%D0%9A%D0%B8%D1%82%D0%B0%D1%8F&ycli
2023-12-31 23:37:12 UTC	5958	IN	Data Raw: 31 37 33 45 0d 0a 39 31 42 31 44 6c 4e 5a 61 56 34 71 61 4f 69 31 31 36 59 48 37 58 39 6e 6b 71 48 77 59 65 68 48 38 77 50 61 6c 4c 4a 32 32 33 79 79 39 77 4e 4b 36 31 2d 6c 76 6d 68 68 32 65 59 31 76 7a 43 42 54 55 37 72 75 31 76 4b 2d 6c 32 75 61 74 54 70 44 68 58 58 5a 68 34 4d 5f 51 70 7a 33 48 58 6c 6c 69 6b 6d 66 45 54 51 6f 7a 4a 67 42 79 77 37 4c 69 33 56 46 75 64 6e 65 44 4d 6f 50 44 33 74 6e 4d 72 6f 6f 31 47 65 44 54 2d 68 35 38 75 31 6a 31 68 30 59 50 62 62 38 43 64 5a 48 51 55 79 41 31 63 73 41 6a 6f 6a 57 4a 35 4c 61 6a 6f 72 43 32 4e 48 76 71 66 6f 58 47 5f 6d 48 47 73 75 45 57 49 74 65 5f 42 34 4c 43 4b 6d 74 31 50 34 52 58 57 33 43 44 72 6b 51 55 66 78 78 6c 74 33 76 4f 58 69 63 42 4a 79 43 6e 44 52 5a 57 6f 7a 34 32 56 70 56 32 72 34 32 Data Ascii: 173E91B1DlNZaV4qaOi116YH7X9nkqHwYehH8wPalLJ223yy9wNK61-lvmhh2eY1vzCBTU7ru1vK-l2uatTpDhXXZh4M_Qpz3HXllikmfETQozJgByw7Li3VFudneDMoPD3tnMroo1GeDT-h58u1j1h0YPbb8CdZHQUyA1csAjojWJ5LajorC2NHvqfoXG_mHGsuEWIte_B4LCKmt1P4RXW3CDrkQUfxxlt3vOXicBJyCnDRZWoz42VpV2r42
2023-12-31 23:37:12 UTC	2225	IN	Data Raw: 38 41 41 0d 0a 22 78 22 3a 30 2c 22 79 22 3a 33 38 31 2c 22 77 22 3a 31 31 39 39 2c 22 68 22 3a 33 37 35 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 38 39 2c 22 77 22 3a 31 31 39 39 2c 22 68 22 3a 36 37 35 7d 2c 7b 22 78 22 3a 31 37 32 2c 22 79 22 3a 30 2c 22 77 22 3a 39 30 30 2c 22 68 22 3a 38 39 39 7d 2c 7b 22 78 22 3a 32 2c 22 79 22 3a 33 34 33 2c 22 77 22 3a 31 31 39 37 2c 22 68 22 3a 34 31 35 7d 2c 7b 22 78 22 3a 34 30 38 2c 22 79 22 3a 30 2c 22 77 22 3a 36 37 35 2c 22 68 22 3a 38 39 39 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 31 31 39 39 2c 22 68 22 3a 38 39 39 7d 5d 7d 5d 2c 5b 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 64 69 72 65 63 74 2f 35 32 32 35 34 38 39 2f 76 73 64 Data Ascii: 8AA"x":0,"y":381,"w":1199,"h":375},{"x":0,"y":89,"w":1199,"h":675},{"x":172,"y":0,"w":900,"h":899},{"x":2,"y":343,"w":1197,"h":415},{"x":408,"y":0,"w":675,"h":899},{"x":0,"y":0,"w":1199,"h":899}]}],["https://avatars.mds.yandex.net/get-direct/5225489/vsd
2023-12-31 23:37:12 UTC	5950	IN	Data Raw: 31 37 33 36 0d 0a 42 39 42 45 46 46 22 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 22 3a 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 37 39 39 2c 22 68 22 3a 35 37 39 7d 2c 22 73 6d 61 72 74 2d 63 65 6e 74 65 72 73 22 3a 5b 7b 22 78 22 3a 30 2c 22 79 22 3a 32 35 34 2c 22 77 22 3a 37 39 39 2c 22 68 22 3a 32 35 30 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 35 39 2c 22 77 22 3a 37 39 39 2c 22 68 22 3a 34 35 30 7d 2c 7b 22 78 22 3a 31 31 35 2c 22 79 22 3a 30 2c 22 77 22 3a 36 30 30 2c 22 68 22 3a 35 39 39 7d 2c 7b 22 78 22 3a 31 2c 22 79 22 3a 32 32 39 2c 22 77 22 3a 37 39 38 2c 22 68 22 3a 32 37 37 7d 2c 7b 22 78 22 3a 32 37 32 2c 22 79 22 3a 30 2c 22 77 22 3a 34 35 30 2c 22 68 22 3a 35 39 39 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 30 2c 22 77 22 3a 37 39 39 Data Ascii: 1736B9BEFF","smart-center":{"x":0,"y":0,"w":799,"h":579},"smart-centers":[{"x":0,"y":254,"w":799,"h":250},{"x":0,"y":59,"w":799,"h":450},{"x":115,"y":0,"w":600,"h":599},{"x":1,"y":229,"w":798,"h":277},{"x":272,"y":0,"w":450,"h":599},{"x":0,"y":0,"w":799
2023-12-31 23:37:12 UTC	2233	IN	Data Raw: 38 42 32 0d 0a 4c 30 77 50 4b 4d 58 34 4e 69 34 48 63 32 65 45 45 65 75 61 64 4d 62 66 51 4d 62 66 51 45 5a 6b 63 4e 5a 71 41 71 34 77 7a 67 30 68 47 4a 68 72 75 35 41 32 54 55 61 71 4c 65 42 4d 5a 46 43 75 66 42 68 73 64 34 6d 58 57 63 74 68 6e 6f 46 63 51 43 35 4a 79 61 4a 67 32 6f 32 4d 64 4d 5f 49 5a 70 59 69 6a 4b 64 68 63 49 6e 4d 43 75 43 44 70 47 64 67 54 6d 53 35 77 6c 68 32 6b 69 32 58 38 37 68 72 6d 44 7a 75 7a 36 5a 55 6d 41 44 61 75 64 73 2d 4f 52 42 70 42 69 6b 56 50 68 51 7a 47 59 2d 48 50 64 30 2d 6a 58 68 72 76 35 6b 54 33 67 73 37 68 6a 74 62 4d 37 36 6c 34 36 76 57 71 46 56 35 52 4e 42 38 35 32 57 72 74 77 69 4b 5a 57 32 71 36 69 32 39 63 4d 4b 57 6f 55 44 35 66 78 6d 65 36 52 4f 67 74 41 73 31 43 4c 4d 49 74 42 47 62 71 55 54 41 61 41 Data Ascii: 8B2L0wPKMX4Ni4Hc2eEEeuadMbfQMbfQEZkcNZqAq4wzg0hGJhru5A2TUaqLeBMZFCufBhsd4mXWcthnoFcQC5JyaJg2o2MdM_IZpYijKdhcInMCuCDpGdgTmS5wlh2ki2X87hrmDzuz6ZUmADauds-ORBpBikVPhQzGY-HPd0-jXhrv5kT3gs7hjtbM76l46vWqFV5RNB852WrtwiKZW2q6i29cMKWoUD5fxme6ROgtAs1CLMItBGbqUTAaA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50104	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:11 UTC	2620	OUT	GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065829%3Ac%3A1%3Arn%3A616456058%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C561%2C1440%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065829%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:11 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 427 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:11 GMT Expires: Sun, 31-Dec-2023 23:37:11 GMT Last-Modified: Sun, 31-Dec-2023 23:37:11 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:11 UTC	427	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 35 32 6b 35 44 54 78 62 70 49 47 37 30 37 67 30 6f 6c 59 59 63 61 69 57 38 73 48 6a 34 54 4d 66 4e 34 56 51 78 54 6d 38 68 7a 6a 45 6e 44 43 68 42 72 41 4e 2b 64 72 74 69 44 57 6d 5a 5a 4d 7a 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"52k5DTxbpIG707g0olYYcaiW8sHj4TMfN4VQxTm8hzjEnDChBrAN+drtiDWmZZMz"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50105	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	622	OUT	GET /get-direct/5146926/ET8mENn2OZUHkOQLCeV7_w/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:12 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:12 GMT Content-Type: image/webp Content-Length: 8908 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 29 Apr 2022 08:55:34 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 5c7366db67e136b1 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]}
2023-12-31 23:37:12 UTC	8908	IN	Data Raw: 52 49 46 46 c4 22 00 00 57 45 42 50 56 50 38 20 b8 22 00 00 f0 73 00 9d 01 2a b4 00 87 00 3e 4d 1e 8b 44 21 06 13 09 b1 04 01 31 2c 8b df 5e 89 aa af 9b 89 ff 6d e6 e5 c9 7d ef 7d 17 50 3f c8 f6 39 d8 5e 55 dd 13 f3 1d f3 3b fd 57 a9 ff ec df e3 3f e9 fb 81 fe bd 7e 2d 7c 13 ff a5 fb 63 ee eb fa df fd bf 50 df cc ff d4 7e d9 7b be ff cc fd 9e f7 45 fe 4f fc 7f b0 07 f6 cf f1 9e 98 fe c9 7f db 7f e6 fb 02 ff 31 ff 59 e9 c1 ec cd fd d3 fe 9f ed bf b5 ef ff 5e ce 8e 17 5f 1f 7f 4a fb 4b fa 6d e5 0f 9a 6f 8f 7e dd e7 8f 8a 7e a8 ff ce ff 35 ea 0f f2 ff c6 ff be f5 a5 fd 3f fc ef 0a fe 29 7f a1 ea 05 ec df f5 5e 84 1f 25 ff 57 fc ef 7e 6e cd fe 3f d0 17 d9 8f aa ff c0 fe ff f9 47 f0 af f3 5f f8 bd 0b fb 23 ec 01 fa c3 ff 07 d6 6f f9 7e 0d ff 67 ff 7d ff 6b fd Data Ascii: RIFF"WEBPVP8 "s*>MD!1,^m}}P?9^U;W?~-\|cP~{EO1Y^_JKmo~~5?)^%W~n?G_#o~g}k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50106	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	841	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 303 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:12 UTC	303	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 37 38 36 37 33 39 37 31 31 34 35 36 38 30 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 37 38 36 37 34 31 30 34 33 31 34 38 33 32 22 2c 22 49 6d 70 49 44 22 3a 22 33 32 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836278673971145680","Duid":"1704065783133633243","RtbBidReqID":"7836278674104314832","ImpID":"32","CryptaIDv2":"0"},"Var
2023-12-31 23:37:12 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:12 GMT Expires: Sun, 31 Dec 2023 23:37:12 GMT Last-Modified: Sun, 31 Dec 2023 23:37:12 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50064	86.110.215.66	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	734	OUT	GET /o-sayte/ HTTP/1.1 Host: faq-kak.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ym_uid=1704065783133633243; _ym_isad=1; _ym_d=1704065828; quads_browser_width=1280
2023-12-31 23:37:13 UTC	636	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 31 Dec 2023 23:37:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: _ym_uid=1704065783133633243; expires=Mon, 30-Dec-2024 23:37:12 GMT; Max-Age=31536000; path=/; domain=.faq-kak.ru; secure Set-Cookie: _ym_d=1704065832; expires=Mon, 30-Dec-2024 23:37:12 GMT; Max-Age=31536000; path=/; domain=.faq-kak.ru; secure X-UA-Compatible: IE=edge Link: <https://faq-kak.ru/wp-json/>; rel="https://api.w.org/" Link: <https://faq-kak.ru/wp-json/wp/v2/pages/62>; rel="alternate"; type="application/json" Vary: Accept-Encoding
2023-12-31 23:37:13 UTC	15748	IN	Data Raw: 62 62 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 72 75 2d 52 55 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 21 2d 2d 20 53 45 4f 20 d0 be d1 82 Data Ascii: bbdf<!DOCTYPE html><html class="html" lang="ru-RU" prefix="og: https://ogp.me/ns#"><head><meta charset="UTF-8"><link rel="profile" href="https://gmpg.org/xfn/11"><meta name="viewport" content="width=device-width, initial-scale=1">... SEO
2023-12-31 23:37:13 UTC	16384	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d Data Ascii: d-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp-
2023-12-31 23:37:13 UTC	15976	IN	Data Raw: 22 63 6c 72 22 3e 0a 09 3c 66 6f 72 6d 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 d0 9f d0 be d0 b8 d1 81 d0 ba 20 d0 bd d0 b0 20 d1 81 d0 b0 d0 b9 d1 82 d0 b5 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 66 61 71 2d 6b 61 6b 2e 72 75 2f 22 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 73 65 61 72 63 68 66 6f 72 6d 22 3e 0a 09 09 3c 69 6e 70 75 74 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 d0 92 d1 81 d1 82 d0 b0 d0 b2 d0 ba d0 b0 20 d0 bf d0 be d0 b8 d1 81 d0 ba d0 be d0 b2 d0 be d0 b3 d0 be 20 d0 b7 d0 b0 d0 bf d1 80 d0 be d1 81 d0 b0 22 20 76 61 6c 75 65 3d 22 22 20 63 6c 61 73 73 3d 22 66 69 65 6c 64 22 20 69 64 3d 22 6f 63 65 61 6e 2d 6d 6f 62 69 6c 65 2d 73 65 61 72 63 68 2d 32 22 20 74 79 70 65 3d 22 73 65 61 Data Ascii: "clr"><form aria-label=" " method="get" action="https://faq-kak.ru/" class="mobile-searchform"><input aria-label=" " value="" class="field" id="ocean-mobile-search-2" type="sea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50109	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	2503	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065831%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:13 UTC	1200	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:13 GMT Expires: Sun, 31-Dec-2023 23:37:13 GMT Last-Modified: Sun, 31-Dec-2023 23:37:13 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:13 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:13 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 30 51 4a 61 73 43 53 67 74 39 4a 61 70 48 79 4b 2f 51 46 2f 53 65 77 75 6e 6a 49 61 31 68 73 6f 65 55 2f 6f 54 38 33 48 33 62 51 72 41 55 62 6d 4a 65 4c 49 47 54 37 53 53 38 67 71 75 76 54 54 22 2c 20 22 62 22 3a 22 6a 54 4b 56 78 70 42 47 42 63 64 73 6b 76 41 53 36 59 39 6c 57 59 73 4d 76 6c 56 66 37 69 65 38 65 49 57 2b 67 6f 34 6e 47 4e 45 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 33 33 5f 37 31 61 64 36 64 31 61 61 64 35 39 35 62 64 33 64 31 31 61 34 31 32 35 30 32 65 38 37 64 35 64 62 62 30 61 33 32 39 30 63 39 64 63 32 62 62 35 39 61 61 33 35 64 38 34 32 36 37 37 32 39 34 37 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"0QJasCSgt9JapHyK/QF/SewunjIa1hsoeU/oT83H3bQrAUbmJeLIGT7SS8gquvTT", "b":"jTKVxpBGBcdskvAS6Y9lWYsMvlVf7ie8eIW+go4nGNE="},"eu":2,"hittoken":"1704065833_71ad6d1aad595bd3d11a412502e87d5dbb0a3290c9dc2bb59aa35d8426772947"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50107	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	642	OUT	GET /get-canvas/5414461/2a0000018ad201d642545894fbb44d3bf70b/cropSource HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:13 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:13 GMT Content-Type: image/webp Content-Length: 71740 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 26 Sep 2023 15:00:51 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 3a907149a5b9acd2 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:37:13 UTC	15792	IN	Data Raw: 52 49 46 46 34 18 01 00 57 45 42 50 56 50 38 20 28 18 01 00 50 3a 05 9d 01 2a 6b 04 20 03 3e 51 24 8f 46 21 84 5a 61 5b 06 01 41 2d 2d c9 80 8d 47 7a 27 c6 f0 29 8b 4e 5e ca c9 e8 2f bc be 55 08 2f e9 39 e5 dc f1 ba eb c7 3f e1 9e d9 dc 03 a1 d6 79 f4 bf ff ff 2f ff 87 a7 9f fa 1b 13 fb 5f fd 0e 64 1e 05 f8 be 20 5e c1 d2 25 fe ff 7e e6 ec 7b 08 f9 71 67 25 48 ef 3d af d8 7a 55 ff e5 e8 44 22 b5 42 d4 fb 25 fc 52 9a 79 e7 e8 cf ef 69 d7 9e 2f 53 7f 8b ce a1 ed 3d 56 7f 6b f4 88 e9 a9 ce 63 bb 43 eb ab d1 4d 7a cf f4 ef fc ff f0 3d 24 fd 8b b0 7f d6 3d db f6 dc fe 07 fe 5f 10 1f 13 fe 0f fe af f5 df ec 3d 87 fe 83 f9 f3 f9 df e5 3d b8 ff a3 e0 af eb bf d1 7f e7 f5 0b fc eb fb 1f fc bf 50 bf d1 fd b9 ff 65 e3 95 bd ff bc ff e7 fe c3 d8 47 dc ef bb 7f de ff Data Ascii: RIFF4WEBPVP8 (P:*k >Q$F!Za[A--Gz')N^/U/9?y/_d ^%~{qg%H=zUD"B%Ryi/S=VkcCMz=$=_==PeG
2023-12-31 23:37:13 UTC	16384	IN	Data Raw: 8c 9a 16 37 36 d9 78 ea a4 1b a8 4f 33 21 7a 9b 0e 0f 0c 66 19 2c 7f de 49 24 db c2 f8 8d 87 9d b7 d7 ac 91 63 c2 36 1d 04 a0 c2 2d bc e3 00 67 3d ae 92 b7 cf a2 7a c0 79 bf 68 36 b2 e9 a5 eb 02 9f c1 53 dc 3c 68 0f 19 ca 1a 1b 25 04 14 f1 91 92 c3 df 0e 43 70 65 d5 92 33 a2 4d 69 32 1a 08 d0 aa 39 c3 af a5 80 0a 98 40 20 10 ae 9a 99 59 4b 5c 0e 98 ee 21 85 98 06 24 3a e9 b9 4d c1 d1 82 b9 3f f0 6c 21 f2 de e6 08 03 f8 a9 41 ae 90 85 2e 61 d7 0d b1 1c 33 92 7a 7c 22 d7 b9 c4 bd 8a 14 e6 07 0e 7d 54 c5 ba 2d 49 e4 5a 81 aa ad 62 f8 99 c9 b8 ce 67 17 97 f3 84 f2 9d 37 22 f5 a0 44 5d 52 5c a5 49 fa 90 e8 36 4f fc 54 93 b7 5f de ec 1d 14 4c 78 7b 3f 28 6f 26 39 c4 c8 9e e7 82 1a b2 28 e1 e8 3b 23 05 c9 fa 08 7f 49 b1 a3 fc 9e e5 ab db e5 0e 82 f6 66 ce 4f f0 Data Ascii: 76xO3!zf,I$c6-g=zyh6S<h%Cpe3Mi29@ YK\!$:M?l!A.a3z\|"}T-IZbg7"D]R\I6OT_Lx{?(o&9(;#IfO
2023-12-31 23:37:13 UTC	16384	IN	Data Raw: 52 9a cb 60 76 a4 30 3b de e5 2e 8d f3 6c 62 b2 10 36 d0 df 62 d4 4b e3 66 7e 23 f5 88 2d 68 63 81 1f 35 e0 9e fb 7e 83 bb 2d 62 bc 62 df f1 58 83 26 31 46 27 7c 17 ae 95 fe 9e 38 b3 6d cf 73 73 8d 15 3e 60 78 63 f8 2e 94 9c f1 f1 58 de 9f 23 15 3e da 48 18 1e 79 a9 da db 3f c4 b6 bb 1d c6 de 82 50 67 f7 9b c3 0b b7 8f a3 bb c6 bf 72 ff ed 9a 2a 0b dc 6d ef d6 51 f9 18 9b 5d cf b3 77 5f 77 4f 46 e2 eb 36 e1 12 63 ff 06 da 79 fb c5 cf 8b 5b e1 39 06 9f 86 9f 9b d9 ed d0 cc d8 b7 e9 9f 99 9a 24 66 b6 6f d3 2a 1e 00 e0 a6 87 84 2f 36 ed 19 5f 77 b2 d2 47 dc 89 78 48 2e 26 63 39 1e 66 90 07 85 99 b4 88 a4 0d 8b ed 7a e0 08 bd 91 12 19 06 29 50 f2 e5 5e f2 33 bf ed b3 d8 a4 48 7a 93 26 02 d9 a2 08 8c 86 0f 32 d1 28 ed f4 4d e3 95 18 b5 c3 62 4e b7 c0 8b ac 00 Data Ascii: R`v0;.lb6bKf~#-hc5~-bbX&1F'\|8mss>`xc.X#>Hy?PgrmQ]w_wOF6cy[9$fo/6_wGxH.&c9fz)P^3Hz&2(MbN
2023-12-31 23:37:13 UTC	16384	IN	Data Raw: 43 a5 b7 d4 df c2 4b e3 f2 4a 97 28 2a a5 26 38 71 30 d4 67 a5 9e 8e 6f 71 58 31 d4 61 7b f5 23 d6 c5 cc 8c ff ba 4a 36 85 c2 25 c4 5a 27 0e 61 3f d7 a2 52 bd 73 f3 b0 cc 3b 1e da 2b 45 51 b1 c2 a4 cc 1a e5 91 94 0f ca 5a 84 66 f2 18 cb e6 92 6f 94 e7 95 bd 36 e0 0b df b4 1c d5 a2 5b e8 87 3c 18 db 8f 50 27 4b 88 68 59 05 29 31 75 df 61 57 ee b8 3a 06 34 79 24 1c 8a 56 b3 c9 df 16 a7 b9 dd 37 04 e2 d6 4e ac f3 93 31 54 d7 02 55 27 c3 0a 73 8d 83 2c a9 6e c6 f4 1e f2 89 e8 b4 f4 fe ea b5 d8 17 17 71 43 3d 9c 91 78 43 6e 04 2d 59 08 1a 83 5d 26 bf 1d 7f df bc cf 3a 2f 91 6e c7 a0 17 f1 24 3d f1 28 04 44 8c cf 1f fc cd ff ff f1 b0 b5 0e 47 14 03 fb 36 54 75 b1 9b e7 a2 32 79 b6 04 aa 75 9c e1 78 2c 15 8b 0e 95 46 a5 c4 c1 09 20 9f bd e4 d2 cb c0 44 69 d5 15 Data Ascii: CKJ(*&8q0goqX1a{#J6%Z'a?Rs;+EQZfo6[<P'KhY)1uaW:4y$V7N1TU's,nqC=xCn-Y]&:/n$=(DG6Tu2yux,F Di
2023-12-31 23:37:13 UTC	6796	IN	Data Raw: 71 d6 fe 51 a9 2f b3 f1 ff bd 7d 4f 55 b7 93 00 83 e9 9a 84 8d 62 7d 31 5d 77 fc 0c cc 85 42 f7 42 f2 09 03 a5 d3 d9 e6 7d a2 47 51 f6 7d cf 2c a5 da 9d 03 32 3a 5d 04 19 63 26 16 d3 7c a5 78 1f 26 30 17 d6 ea 0c 43 94 30 38 ac 3a 1c 06 20 28 49 bf 45 44 3e 20 9d 6f 50 ef 97 3d 95 b0 9c 2c 36 f7 aa ad 35 38 ab 3e 54 fd c5 47 91 03 03 60 97 fd 49 9b 9e 25 80 29 2b a9 bb 9f be 9e f9 68 cb ee 1d 1c 23 39 10 58 76 86 1c 99 bb b1 34 f1 7a 5c 0b 6f 1b 25 1f 32 89 79 5b 94 66 78 bf 52 fc d2 4b df 8e b6 b6 f5 68 b6 be f3 bd 5b 50 bf cf f7 13 62 c5 e8 a2 87 05 7b 06 0f fa 2a be 95 79 2b fa 8c 58 df c3 cf 1e 53 13 5f 72 b5 4c 3d 31 95 47 4d a3 76 78 13 58 81 b6 f1 74 80 1c 1c ab 3c d2 55 02 dd d9 c7 35 11 e5 de a2 f3 60 6a 1b f4 35 d1 5b 56 f5 34 5e f8 17 9b 46 55 Data Ascii: qQ/}OUb}1]wBB}GQ},2:]c&\|x&0C08: (IED> oP=,658>TG`I%)+h#9Xv4z\o%2y[fxRKh[Pb{*y+XS_rL=1GMvxXt<U5`j5[V4^FU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50110	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	1561	OUT	GET /an/tracking/WYeejI_zOoVX2Lc20UKG0BFVUJw4s8S8Un2D7aGP19FlikB5R7ziv8ArqyZSATDFTiXBVMTiuecMbfQMbfREZZC1Ofz3jgTHwJrjVlXheGNNz25Cmttm5b24IzE7tODWf8Unp-BubGF49WuMUX2NS1v0nwaYBL9wvY8WLN23vuJqEeE3NTvyRVGWoRcgi4N8g28Sp0Hm43D0XxTXl8GIRn2FEDAapPjb8SdWHQUzAnh6leRSB0ip-QeP6sdvJjQ89zI4SVgez1em0rWXDLochfDrlKRtPnfmrf4N0YHLOAD304McNZm2s680Ar904IvD6FGXSXETsGaJ9-8Bt19EO0jxYhShO4nLPBSj5hObdC0MmDWPSbEcKTcS2QnxCg6dL5eHO_b0ji8WK-Q0JDO4sMr64Q0CLHIAC2de4xmJp4pmX4QO2UMchjCnkWL7cEyGU0PB4zEA6AQRWiWDGm3ccorDFO_roHvsi1-kCRdbWozyQV-tmXRQzrROGljS2tzL_iu0LiZNEfdsdtKoxKppXYtCCWTUNTTrB6qMW6foftSlffQjysGlnkO8vSSxN5LjOFuRqxQcvCrxZvmaSOBoMrhNzKOdIPoWlDP7BHffZF9PVtO5yb674vGdYrvdpeYP0s6vf6yiLogLIciFBo5i6glys1iKJ2YLIcKE_1EKCK3U9OIHM-T1OTk2p9dkXMH0eSG9clySVkTxtV2Z7uVwzOL1qY_kGQLbCKdpVm00~2?action-id=11 HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:37:13 UTC	1047	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:13 GMT Expires: Sun, 31 Dec 2023 23:37:13 GMT Last-Modified: Sun, 31 Dec 2023 23:37:13 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065833118692-16590459828300700720-balancer-l7leveler-kubr-yp-sas-143-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50108	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	611	OUT	GET /favicon/manner-matter.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:13 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:13 UTC	966	IN	Data Raw: 33 42 46 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 86 49 44 41 54 78 01 ec 8e 01 86 80 60 10 46 5f 05 aa fa 4b c7 48 48 00 22 02 3a 41 a0 40 47 49 d5 05 02 41 d2 2d ab d6 2c 96 2c 36 0b bb 68 18 c6 f3 f9 e6 69 4a a9 8b 3f 1c 1d e0 15 78 05 5e 81 7f 2f 70 5d 97 ec 77 fe 9c c9 fe 4e e0 38 0e 5c d7 c5 71 9c 5b 89 ae eb f8 be 7f 63 72 7b 9e 87 61 18 37 66 9a 26 b6 6d cb fd 5c 40 c2 e7 79 92 24 09 f3 3c 33 0c 83 3c 14 86 4c 59 96 ac eb 4a 1c c7 c2 44 94 28 8a 58 96 85 aa aa d0 34 4d 38 4a 29 da b6 65 1c c7 2f e1 1f 05 a4 cc b2 2c 9a a6 61 db 36 8a a2 20 cb 32 82 20 90 62 ea ba a6 ef 7b d2 34 25 0c 43 f6 7d 17 51 a6 69 22 cf 73 e1 92 fb cc 77 5d f7 c1 57 f9 83 7a 04 07 01 fc f6 d5 66 20 83 Data Ascii: 3BFPNGIHDR szzIDATx`F_KHH":A@GIA-,,6hiJ?x^/p]wN8\q[cr{a7f&m\@y$<3<LYJD(X4M8J)e/,a6 2 b{4%C}Qi"sw]Wzf
2023-12-31 23:37:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50112	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:12 UTC	622	OUT	GET /get-direct/5235951/_YTYfRylGb2kyKOb3jGtew/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:13 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:13 GMT Content-Type: image/webp Content-Length: 6912 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Thu, 28 Dec 2023 14:29:29 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 60bb4a02cc42bd2c NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:13 UTC	6912	IN	Data Raw: 52 49 46 46 f8 1a 00 00 57 45 42 50 56 50 38 20 ec 1a 00 00 b0 78 00 9d 01 2a b4 00 b4 00 3e 51 24 8e 45 a1 a1 09 9c b2 f0 0c 02 82 59 4f fd 69 aa 7b 4f 20 3d f9 35 4b 90 00 ff 2c d1 e4 9f 87 e7 9f d9 5a 14 76 d1 23 4b 7d 7a 76 dc 17 e3 01 eb 4b bb 31 ea d7 fd 3b a6 cf ff 57 b4 8f fb 6c 25 af 22 7f 6a eb bf f5 de 97 2c 7b f6 7f a9 67 7b f9 f4 ed 1f f6 cf 11 4c 5a ed 5c de bf d8 fa 08 f7 db c0 ab 53 ec 80 3c 75 ff c1 e2 f3 f6 0f fa 7e a7 ff e3 3d 62 7f de f2 c7 fb bf a8 d7 4c 42 ef 82 65 5d 9f 3a 60 13 f1 d6 db 62 77 82 79 3f b4 cd c9 30 4f 75 a9 2e 05 fc 8d 17 ce 49 bf 7b 92 da 58 36 ce 6c 11 43 dc 17 7e 5f 1e c3 66 2b 49 c3 10 4f b6 33 99 b5 ee c6 73 c4 cd ca e4 9a d9 46 1e 51 1e 23 2c ed 2d 89 66 f4 80 3b 99 55 f1 c0 ea 2f 12 9a e0 87 31 51 6a f3 2f f2 Data Ascii: RIFFWEBPVP8 x*>Q$EYOi{O =5K,Zv#K}zvK1;Wl%"j,{g{LZ\S<u~=bLBe]:`bwy?0Ou.I{X6lC~_f+IO3sFQ#,-f;U/1Qj/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50113	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:13 UTC	669	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:13 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:37:13 GMT Expires: Sun, 31 Dec 2023 23:37:13 GMT Last-Modified: Sun, 31 Dec 2023 23:37:13 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:37:13 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50114	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:13 UTC	9434	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=32&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=8664901704065829155&target-id=7346773&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.55%2C%22isInIframe%22%3Afalse%2C%22w%22%3A288%2C%22h%22%3A0%2C%22width%22%3A288%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A912%2C%22top%22%3A993%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=4060&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChqkpLDktumBYKCuFJjIOb_ZzNx4hqaWSkCfCPLKiXykR0RSEdl7hh1te7vbviVmal1mm02XqWWonJOXg7wloC8CcAmjVUUkiZz8-fp2t7YTRWHFCmKU4mhVQaqk0aryQk2jDbJAmdN4OJ7cQ3cJDd3D8qSepHsyF6-7RJ7Q43uYnsQlfEmX-MFD9nyX0IV4grIX9PsCiPaCfJfoGZfdA_wk5S5Rfx5Ey8fCGbjlL-Dmz3_iZUcwoLX62Vab5kHRkyLNYRrVeaiJMkWQxYmxa-IkyJMAppE5co16Gq1-Zk8Vq0m6RlmEIUyjKk7zTqWMKTqposxTqlxdRnmoiJMwg5H3WJMXyYsHqvx5qqNYoY5JkzKNqTLlg8gpCzJlUFJFeUGuiLMk6KoiLMNMnVMVUV2jjDIKVeBIHfdjr9ZEZClV2HPl05IEcVQ2Gq3S5FlQ0uvo6EGCbaTRqjMYdZcwC_IHE71U4UiSZ4pSmSXk_WeY50l5hOdRGeTQAyONB_pn_-h1SHFIJz7k4h8ivBSm5y8yCF0Crb7gJXbIVi2tVTLNkiwtlGWTyikpc01QxkndlofFTr7IkpxD1FS-sGCu3JP3BfeoG1c8I-qDFkv6X74CxLlxUjjyDy6jKO5rPX0Ml1YQw4nsW1OZPe5ptKGiSCrDW6YkjQrF7wGMJ_otZPssXK3-eNLM7seONRsgDueLD0-CLEZAPU4Ez07uiX_eeChmwe65Yk_kgnfx24Q8tJvRryhecDcaiYdd1o3uqdwE6m-m1pHMacswLyKNijKO0t2jzelAOKs63F9cfwA4yPfozYNk-qHqi_QjKO9RmzzHSRQFRd5-wn2xep1j2a08yyyZk6h05nS3-yypzJQ1lY4Tm6iux7HDld3i0YxDaMfdeHMIvVyU5WGtyFGQaRa_K3Z1rDzuJDvpJC4p8yIgi750fXWnyLuyiH7ow10Rh1MxYesWTA9IFHm5YMPgmYalgoxKmYWqfihVfDULikRdROquaqQXQU4RRyQlVQFsUQKbFElG0leUZxt71UFjM2Sx8nXElyu9OfdBOiuYm_q1qvzeIGit5u8FrsNcYhf3a-1X4BcncnEHoQheXvCy4ucGPSviNJt-V9GbIJd1_5AsTYsZzZOioOkeTj9yPeHXPjHn5lxEAmyJNOxRv_py7yXq30NQ_3NH62V3oitW_vDDfmkMw1XhO9bV0GuGxay_tWm5C_44YsbuAfZ0fQN8rbmyeO9hTxb2Cu8Dtu-lX13xjhSuDTycZ_8J9sC1Tdte29_H_vEPXNfqFeZlwzq5q5lpHDk57AcHekmQPiDR5b3J6Pg7pCNBwqLYIf71rSXOUkBbS7LsRJPeZEBWb36cvUwC1cfZSZEpWTTisk1zdVbA6_abtOCCH7THvxy8P_H_pESb_7D2OcJLXkjpQcA9jEW0rS7i1n7_XnSHpHvO3cT__-M-F7kn6B44rt17i6a_g_-LLUlhtNT_VNzL0PfWLXyWfDj8DXpEiu-0kyu-D4HecPmx9PsvlURDCfb1swtx-wu9Txtf26K5ED9_7LeqoGzvRHSXYoTXXYtcFEP41qUFAY61LrQdFdYN6t65w5C2g10E9QEKlEV7KC4E5hsX9B16r4y912u9zHehbqdL643vSrKJdT35Z_wLvzY--DUB20ihAzJPQtWHioBIFYUmmGjLcfg3Dr2OtNYW2WZGLmy5eAYeL_768Q8z6VW0dG229TcLu3gXCtWyL9tFpLfxngx96oKhZanL9fzF0q8tegIxj13f_TEWAz_4CnLT3vqW4pbffBfSdsXP0oVwtJ4_aaeobfMJ4W4rjJabV_TL9pd56RG-w_O3wLea_T7sjlR0CDUDuUh90obvYXw63bigphnI66I-heKaSJayB8vYij8HCl79k17te3pxTdFv3gevSzEyH4DghRhEOF6It6X5G91ib6MyQNcwLOAchE6aJeqYNOw6Bic48rkDL4iLkqa5kukMcW_150tYewuMC8g6wJ2Ft1328tJb5WOY673t6_cTDhRBy7CCbe5nYphqe0kHYyXl-y7R4d4urMv0biP-jxIc_jaOm7iojvZSSh3sT3bHv4nkGkjYXQjbpEeIhLG32Vg48C8qfwrOQ_t6fGWReOsxumHamA8q-w6hDo_gjQUL7gb4ZjORtCQun67fV00cJGhjeGRnIioZS-h6Xpc890d4rTPrJ1qKPlDVUeMW-W-cX8SzCn8sqZLtoYnyrV0BaqIepoeB4IcACQ4f4q7ZSofMtov5rVJcpAy7BZE1wL9ixWTIczUQyn5bXC8h2ahcfnFjS_Eyg1MMNnpcOzZus9SjO2vvqsKtEUfrNzWkFr3IPltuFIq9z5W8AD2IfUKmpxd_7DLC7ekWcB0R-LWBpYcFl_BzNLj6Q2F12zoshg3lmq15BCQbhMmbKzMpGO8oFl3Id-0CdQOs1j1PD5gbum3Z6jUcmmGvUeYCtba2JzdY4hP5UXWgNyCy7anihuW1M0s_nrFibLsV7Vf_bSfjuVB_cYDcEAkaum9msB2G78RqfGyZ7EwTl4HRNv5Yd_65_H7Ag6rSjaTbIHj9hg3X_JUxd33EvQ6UbD05_kBzM-vDmEVsYB808filYEdyvMrmVeHaHqeIF_q9eVZDLda2rX9LAL3BD9a4jbVjrh8Ir3f8GietZ3e0bfcLmoems0Kew2f7EipIjuBvoIVjbxDvfTE21CZoVxeu8UyIGP6kDQFnIQoPPv8RGUNH8N_RwR3Y_ukE-fj-q8x_RROaS8z8E1uKIrBC-TcyF97_Utd5GvxGFnp3oS1oaS-53GYH5vNQgMMeAObfASBGM-JaLZnrcpI0wWwjqZnrWuTmu5AbJMLZG8F44DwgPRwDL8Q7MMuHYGzkl_4nPBaNkQx-Qu2zRx4E71l6uNWzp8d89tVaODcRSNZ-4Hti5lsW7PrG_znxBC3jCEhOMbhGKNzBxcbMe5fm3S68aJOTTIsDlEcJ-o5uhelvUPtPwfStozddo-Jh62-vE40ZQOSCXz8W_Rrx8IJlhWhZi_2v18w4npwRZA_HMb77v5e8wyBn1MSpXh1rQosn_XMDb4HvWzsDxkSJt-H6qpUMU5g_w7DGWl9cel1qMQreBmPmPyqAB9kDqtm1r6W_uI_f-Z4ufiu-gpvLemYN2u0xegutWymfr0tHJbhCMo8W_uxiQyNzDfdd7-pXNuj8HdAqzZ-RYqvd-qY1WJqB-wvZbthoTNqCLX41Uznw3ZZTt2D_z995FfP90eWX9DFJTXxz-JogyS7X5-fZlh9Mi-2WC1mqo7F7wec6x7KlWJY5TsxXbTdFQZElPBqQvAqwydfGPAqNo6Rp2cIi0jVkUfTjNtLonKUdhUsTCum5VSlNuNKhlCstD1fUVlPHwWEbRevpAAhgOh0sJKgo2qrDC1F_Z7sa70La6m41ln3BRlVHkRfFFqDitK9sXdDVuCptVU7STE2RN-XOKqSIsqstrNXIKheqGHqjmno0C2s-pq3cGuEtP38wLufGlKMhp6JFkSIgm72jXPMPpeZRnURtX5xVo8O0IdPGKuvPwrZ-GKKqgdofR3y1aXZ0IgO-gJdGhIBY5NiBKSh5TuqYNhixHRJrIzE7Vkh0blg8mbVLzIZ-FIeH7KiHvPV1c5h4Xtw6RHhm1hcbh1uCXHQVjfJq01W9UjdR8thFxTWLTNpB-RRGBW-rFFfsuXbSiYwvnPZEKMfMoa8dujXVlqcQ70SufKMIV1MhTkP9zntgq12j6YdK7XjcrBhwlbrL0VMYPyWFQZyWB3TvcmSNpmldv1ndAXkqLVdy4sD20VeXZ2RZp_gaz0cxKYeKzlDflg6rz2wCdP7G6WrE5UNqHXVMSf1lI1YeoFJnNE_3rBnTI50xXUc6W1qzwbADxjsqGiOcQMNfOu0ANM0TMqPzS9CteK2KbqtiNU7BNa9pa6nZxr2E2oqJ4LvJbze0OKVNY5cV3Zo4Jv8ExD645hp6p2egp-uAitOIslSSM0ZkHTGBCX6GdI4zDECDcNxyB3ze85cOeKsA-A%3D%3D&uniformat=true&callback=Ya%5B5107538958271%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:37:13 UTC	1297	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065833481813-5666353352414629915-balancer-l7leveler-kubr-yp-vla-138-BAL-3055 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:13 GMT expires: Sun, 31 Dec 2023 23:37:13 GMT last-modified: Sun, 31 Dec 2023 23:37:13 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:37:13 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: MediaCreative x-xss-protection: 1; mode=block
2023-12-31 23:37:13 UTC	5265	IN	Data Raw: 31 34 38 39 0d 0a 7b 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 69 73 53 74 61 66 66 22 3a 22 66 61 6c 73 65 22 2c 22 77 68 79 54 68 69 73 41 64 4c 61 6e 64 69 6e 67 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 72 65 61 73 6f 6e 73 2e 79 61 6e 64 65 78 2d 74 65 61 6d 2e 72 75 2f 3f 68 69 74 6c 6f 67 69 64 3d 37 38 33 36 32 37 39 33 37 30 30 38 36 34 31 31 32 31 36 22 2c 22 73 73 70 49 64 22 3a 22 22 2c 22 70 61 67 65 4c 61 6e 67 22 3a 22 31 22 2c 22 64 65 74 61 69 6c 65 64 44 65 76 69 63 65 54 79 70 65 22 3a 33 33 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 6d 65 64 69 61 2d 63 72 65 61 74 69 76 65 22 2c 22 Data Ascii: 1489{"common":{"pageId":"3797907","deviceType":"6","sspBidId":"","isStaff":"false","whyThisAdLandingLink":"https://adreasons.yandex-team.ru/?hitlogid=7836279370086411216","sspId":"","pageLang":"1","detailedDeviceType":33,"productType":"media-creative","
2023-12-31 23:37:13 UTC	2146	IN	Data Raw: 38 35 42 0d 0a 5f 41 44 5f 44 41 54 41 5f 4c 4f 41 44 22 3a 22 63 74 6c 22 2c 22 41 53 59 4e 43 5f 51 55 45 55 45 5f 49 4e 49 54 5f 44 45 50 53 22 3a 22 63 74 6c 22 2c 22 55 53 45 5f 50 41 59 4d 45 4e 54 5f 49 4e 5f 50 41 52 54 53 5f 53 4d 41 52 54 5f 54 49 4c 45 22 3a 22 72 65 64 22 2c 22 44 49 53 41 42 4c 45 5f 57 49 44 54 48 5f 53 45 54 54 49 4e 47 53 22 3a 22 63 74 6c 22 2c 22 45 4e 41 42 4c 45 5f 43 4f 4d 50 41 4e 49 4f 4e 5f 41 44 5f 53 53 50 5f 45 58 50 22 3a 5b 5d 2c 22 52 45 4e 44 45 52 5f 48 55 41 57 45 49 5f 56 49 41 5f 52 52 22 3a 22 65 78 70 22 7d 2c 22 66 6c 61 67 73 4d 61 70 22 3a 7b 22 56 41 53 5f 53 48 4f 57 5f 41 44 5f 4c 41 42 45 4c 5f 46 4f 52 5f 49 4e 5f 42 41 4e 4e 45 52 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 Data Ascii: 85B_AD_DATA_LOAD":"ctl","ASYNC_QUEUE_INIT_DEPS":"ctl","USE_PAYMENT_IN_PARTS_SMART_TILE":"red","DISABLE_WIDTH_SETTINGS":"ctl","ENABLE_COMPANION_AD_SSP_EXP":[],"RENDER_HUAWEI_VIA_RR":"exp"},"flagsMap":{"VAS_SHOW_AD_LABEL_FOR_IN_BANNER":[{"value":"TRUE","t
2023-12-31 23:37:13 UTC	6037	IN	Data Raw: 31 37 38 44 0d 0a 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 52 45 53 54 41 52 54 5f 4d 55 54 45 44 5f 4f 4e 5f 45 52 52 4f 52 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 35 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 32 31 30 36 22 7d 5d 2c 22 53 45 4e 44 5f 44 49 53 41 42 4c 45 44 5f 41 44 5f 54 59 50 45 5f 49 4e 5f 50 4f 57 45 52 45 46 46 49 43 49 45 4e 43 59 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 65 78 70 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 38 30 37 34 22 7d 5d 2c 22 56 41 53 5f 41 44 44 5f 45 4e 41 42 4c 45 5f 50 41 47 45 5f 4f 50 54 49 4f 4e 53 5f 50 41 52 41 4d 5f 54 4f 5f 56 4d 41 50 5f 4c 49 4e 4b 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 Data Ascii: 178Dvalue":"TRUE","testId":"878444"}],"VAS_RESTART_MUTED_ON_ERROR":[{"value":"5","testId":"892106"}],"SEND_DISABLED_AD_TYPE_IN_POWEREFFICIENCY":[{"value":"exp","testId":"898074"}],"VAS_ADD_ENABLE_PAGE_OPTIONS_PARAM_TO_VMAP_LINK":[{"value":"TRUE","testId
2023-12-31 23:37:13 UTC	2138	IN	Data Raw: 38 35 33 0d 0a 63 74 6c 22 2c 22 74 65 73 74 49 64 22 3a 22 39 32 39 36 37 33 22 7d 5d 2c 22 55 53 45 5f 50 41 59 4d 45 4e 54 5f 49 4e 5f 50 41 52 54 53 5f 53 4d 41 52 54 5f 54 49 4c 45 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 72 65 64 22 2c 22 74 65 73 74 49 64 22 3a 22 39 31 37 38 30 37 22 7d 5d 2c 22 44 49 53 41 42 4c 45 5f 57 49 44 54 48 5f 53 45 54 54 49 4e 47 53 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 63 74 6c 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 32 39 30 34 22 7d 5d 2c 22 45 4e 41 42 4c 45 5f 43 4f 4d 50 41 4e 49 4f 4e 5f 41 44 5f 53 53 50 5f 45 58 50 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 5b 5d 2c 22 74 65 73 74 49 64 22 3a 22 39 32 33 36 31 33 22 7d 5d 2c 22 52 45 4e 44 45 52 5f 48 55 41 57 45 49 5f 56 49 41 5f 52 52 22 3a 5b 7b 22 76 61 6c 75 65 Data Ascii: 853ctl","testId":"929673"}],"USE_PAYMENT_IN_PARTS_SMART_TILE":[{"value":"red","testId":"917807"}],"DISABLE_WIDTH_SETTINGS":[{"value":"ctl","testId":"892904"}],"ENABLE_COMPANION_AD_SSP_EXP":[{"value":[],"testId":"923613"}],"RENDER_HUAWEI_VIA_RR":[{"value
2023-12-31 23:37:14 UTC	6045	IN	Data Raw: 31 37 39 35 0d 0a 38 4f 48 33 75 34 6a 7a 43 5a 77 4d 58 37 33 54 35 43 47 6b 4d 34 38 6d 37 6f 70 66 51 61 64 30 44 4e 61 4a 6b 5f 55 71 50 55 7a 36 39 69 5a 62 31 5f 6c 53 35 4d 72 57 56 64 6c 61 50 43 61 4a 62 31 2d 49 2d 6b 77 74 6b 57 61 59 48 45 4b 72 6f 77 4e 7a 38 74 62 49 67 4c 49 51 55 74 58 31 47 37 52 42 76 4b 56 67 71 37 4b 71 7a 4d 4b 41 6d 34 34 32 46 6f 70 37 65 30 34 46 34 5f 48 50 75 53 6d 31 64 4c 74 51 52 6d 34 6f 54 78 74 35 42 46 79 74 52 68 34 66 6d 43 30 7e 32 22 2c 22 70 75 6e 79 44 6f 6d 61 69 6e 22 3a 22 6d 6b 2d 72 6e 73 2e 72 75 22 2c 22 70 6f 73 74 65 72 53 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 2d 63 61 6e 76 61 73 2f 35 34 31 34 34 36 31 2f 32 61 Data Ascii: 17958OH3u4jzCZwMX73T5CGkM48m7opfQad0DNaJk_UqPUz69iZb1_lS5MrWVdlaPCaJb1-I-kwtkWaYHEKrowNz8tbIgLIQUtX1G7RBvKVgq7KqzMKAm442Fop7e04F4_HPuSm1dLtQRm4oTxt5BFytRh4fmC0~2","punyDomain":"mk-rns.ru","posterSrc":"https://avatars.mds.yandex.net/get-canvas/5414461/2a
2023-12-31 23:37:14 UTC	2130	IN	Data Raw: 38 34 42 0d 0a 5c 22 20 63 6c 61 73 73 3d 5c 22 6a 35 32 36 30 63 62 63 36 20 6c 32 34 33 39 35 34 31 64 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6a 63 34 31 30 31 39 32 20 79 62 31 63 61 38 32 35 61 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6d 38 34 34 65 35 62 62 20 74 33 65 64 32 66 61 66 32 20 66 35 37 61 39 62 30 37 62 5c 22 3e 3c 64 69 76 20 64 61 74 61 2d 62 6c 6f 63 6b 2d 6e 61 6d 65 3d 5c 22 74 69 74 6c 65 5c 22 20 64 61 74 61 2d 62 61 63 6b 70 61 63 6b 3d 5c 22 31 32 36 5c 22 20 63 6c 61 73 73 3d 5c 22 6a 35 32 36 30 63 62 63 36 20 63 61 33 39 63 31 35 39 38 20 68 63 35 62 39 39 36 34 36 20 63 31 35 37 32 63 30 62 39 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 64 33 65 61 33 34 35 34 66 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 Data Ascii: 84B\" class=\"j5260cbc6 l2439541d\"><div class=\"jc410192 yb1ca825a\"><div class=\"m844e5bb t3ed2faf2 f57a9b07b\"><div data-block-name=\"title\" data-backpack=\"126\" class=\"j5260cbc6 ca39c1598 hc5b99646 c1572c0b9\"><div class=\"d3ea3454f\"><a href=\"h
2023-12-31 23:37:14 UTC	6053	IN	Data Raw: 31 37 39 44 0d 0a 72 31 76 38 4f 58 30 46 46 44 62 67 51 55 76 6f 77 76 4d 4c 5f 69 4f 47 56 78 75 48 67 4a 4d 70 76 75 31 62 37 6c 56 73 45 57 50 37 72 6c 33 39 49 69 70 77 4b 47 6a 5f 4e 74 51 44 56 56 72 6e 4f 30 54 6c 51 70 31 4f 32 54 43 53 71 52 79 66 58 62 33 68 6f 77 68 6b 6a 4f 73 68 6e 71 54 43 67 78 65 6e 69 35 65 39 68 53 77 4a 73 37 70 6c 65 77 47 59 71 68 52 5f 51 45 6c 6b 70 35 72 42 39 72 64 6b 70 35 73 31 6f 58 5f 39 5a 73 75 31 73 6b 67 5a 4f 6d 5f 75 72 66 4d 72 46 6f 76 68 72 37 4a 66 38 75 47 56 61 6a 68 55 6a 77 65 76 43 61 4a 62 31 55 77 77 43 4d 5a 4a 49 55 2d 49 6f 54 6e 34 5f 43 51 52 63 61 52 6f 6e 4e 41 66 4c 41 51 6d 79 6c 32 44 58 55 72 74 4b 43 4a 31 74 62 54 5f 66 6a 59 62 54 4a 68 57 47 47 42 56 6f 34 45 54 34 35 68 7a 33 Data Ascii: 179Dr1v8OX0FFDbgQUvowvML_iOGVxuHgJMpvu1b7lVsEWP7rl39IipwKGj_NtQDVVrnO0TlQp1O2TCSqRyfXb3howhkjOshnqTCgxeni5e9hSwJs7plewGYqhR_QElkp5rB9rdkp5s1oX_9Zsu1skgZOm_urfMrFovhr7Jf8uGVajhUjwevCaJb1UwwCMZJIU-IoTn4_CQRcaRonNAfLAQmyl2DXUrtKCJ1tbT_fjYbTJhWGGBVo4ET45hz3
2023-12-31 23:37:14 UTC	2122	IN	Data Raw: 38 34 33 0d 0a 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e Data Ascii: 843kit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;position:relative;height:100%;-webkit-box-sizing:border-box;box-sizing:border-box;-webkit-box-flex:1;-ms-flex-positive:1;flex-grow:1;max-width:100%}.
2023-12-31 23:37:14 UTC	6061	IN	Data Raw: 31 37 41 35 0d 0a 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 31 35 30 70 78 29 3b 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 31 35 30 70 78 29 7d 2e 61 61 63 63 65 34 30 31 37 2e 6b 38 36 35 62 39 35 32 65 2c 2e 61 61 63 63 65 34 30 31 37 20 2e 6a 31 32 66 62 63 34 38 36 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 61 63 63 65 34 30 31 37 20 2e 6a 31 32 66 62 63 34 38 36 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: 17A5radient(270deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 150px);mask:linear-gradient(270deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 150px)}.aacce4017.k865b952e,.aacce4017 .j12fbc486{top:0;left:0;height:100%;overflow:hidden}.aacce4017 .j12fbc486{-webkit-tran
2023-12-31 23:37:14 UTC	2114	IN	Data Raw: 38 33 42 0d 0a 72 61 64 69 65 6e 74 28 31 32 31 2e 32 38 64 65 67 2c 23 36 36 39 36 30 30 2c 72 65 64 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 74 75 72 6e 2c 23 30 30 32 39 66 66 2c 23 38 66 66 66 30 30 29 2c 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 31 30 30 25 20 31 36 34 2e 37 32 25 20 61 74 20 31 30 30 25 20 31 30 30 25 2c 23 36 31 30 30 66 66 20 30 2c 23 30 30 66 66 35 37 20 31 30 30 25 29 2c 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 31 30 30 25 20 31 34 38 2e 30 37 25 20 61 74 20 30 20 30 2c 23 66 66 66 35 30 30 20 30 2c 23 35 31 64 35 30 30 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6f 76 65 72 6c 61 79 2c 73 63 72 65 65 6e 2c 63 6f 6c 6f 72 2d 64 6f 64 67 65 2c 6f 76 65 72 6c Data Ascii: 83Bradient(121.28deg,#669600,red),linear-gradient(1turn,#0029ff,#8fff00),radial-gradient(100% 164.72% at 100% 100%,#6100ff 0,#00ff57 100%),radial-gradient(100% 148.07% at 0 0,#fff500 0,#51d500 100%);background-blend-mode:overlay,screen,color-dodge,overl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50111	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:13 UTC	615	OUT	GET /favicon/solargameprotect.com?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:13 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:13 UTC	647	IN	Data Raw: 32 38 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 47 49 44 41 54 78 01 c4 97 35 70 1b 61 14 84 f7 3d 59 10 56 5f a9 2f 0c 5d 18 ea 30 33 73 15 a5 9f 31 f4 8d d2 84 c1 cc 6c d7 61 68 95 be 51 5f 98 51 f2 dd 8b b7 ca dc 58 8c df 8c aa 83 dd 07 37 da 5f 90 27 67 ee 44 c3 21 67 f9 8c b9 7a c4 c4 1a 05 16 01 24 0c 10 9b 33 48 42 4c e2 06 fb 9a f4 6f 9f 18 6f 8f cd 21 0f 04 39 b8 72 e7 49 c4 92 16 85 ba b7 41 c1 7c 31 69 17 bf b4 f5 b7 bf 4e 14 65 80 15 07 9d 95 16 18 a2 28 05 43 6c a0 e7 ed f3 bc 0c 78 aa 4e b9 5f 20 88 a0 1c 18 12 e2 d7 63 e9 ba a1 f0 82 6b 77 1e 36 96 53 9c f0 5d 7c e7 c5 6b 0f 1b b3 1a 60 e5 4e 4a c6 ca 28 ee 31 a1 22 63 d4 48 6b 80 33 cf 54 79 b9 3b 71 e6 ce 9d f0 16 Data Ascii: 280PNGIHDR szzGIDATx5pa=YV_/]03s1lahQ_QX7_'gD!gz$3HBLoo!9rIA\|1iNe(ClxN_ ckw6S]\|k`NJ(1"cHk3Ty;q
2023-12-31 23:37:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50118	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:13 UTC	645	OUT	GET /get-yabs_performance/7731570/2a0000018442f63b164e0c1f14366fe3af77/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:14 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:13 GMT Content-Type: image/webp Content-Length: 4888 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 04 Nov 2022 14:05:44 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: e170bcdffc1b90d8 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:37:14 UTC	4888	IN	Data Raw: 52 49 46 46 10 13 00 00 57 45 42 50 56 50 38 20 04 13 00 00 d0 4c 00 9d 01 2a a6 00 c8 00 3e 51 24 8f 45 a1 a1 09 cd 22 8a 0c 02 82 58 db bc f0 03 68 5e b5 34 1a d2 a3 50 f0 0e e4 6e fb e5 df 1a 83 bf 6c 3c a7 f9 9b cf 0f fa 4f 56 1e 60 9f 28 1d af 3c c2 fe b9 fe db fb b5 7f bc f5 79 e8 01 fd 03 fb 37 5b 4f ed bf b1 2f 97 27 b4 07 f7 4f f9 7f b2 1e d4 77 8f 9f 8e f0 c7 cb 07 bf 74 18 fe 9b c3 3f 4d 7f c0 f4 13 f9 8f de 6f dd 79 cb df 8f c5 8d 40 bf 21 fe 95 fe a7 7b 97 58 ff 21 ff 2f d4 17 db 3f ac ff b6 fb 80 f9 1f f9 bf 33 7e c5 7b 01 7e b0 ff cc f2 b9 f1 1e a0 47 e9 9f fb ff da bd 8f 3f ee ff 5f fe 37 d6 2f d4 1f f8 bf c6 7c 08 ff 39 fe eb ff 47 f3 9b bd 47 a3 bf ed 81 4f c2 e9 90 a5 4a 64 af 1f 7d 39 27 6f 20 b0 45 d9 d3 10 14 df a3 78 d8 28 a3 c9 ec Data Ascii: RIFFWEBPVP8 L*>Q$E"Xh^4Pnl<OV`(<y7[O/'Owt?Moy@!{X!/?3~{~G?_7/\|9GGOJd}9'o Ex(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50121	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:13 UTC	392	OUT	GET /get-direct/5146926/ET8mENn2OZUHkOQLCeV7_w/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:14 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:14 GMT Content-Type: image/jpeg Content-Length: 9460 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 29 Apr 2022 08:55:34 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 22eb5eed769ad983 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:14 UTC	9460	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 87 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 07 01 08 ff c4 00 44 10 00 02 01 03 03 02 03 07 02 03 06 03 05 09 00 00 01 02 03 04 05 11 00 12 21 06 31 13 41 51 07 14 22 61 71 81 91 32 a1 15 23 c1 08 Data Ascii: JFIFC!"$"$C"D!1AQ"aq2#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50119	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:13 UTC	604	OUT	GET /favicon/mk-rns.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:14 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:14 UTC	1471	IN	Data Raw: 35 42 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 05 7f 49 44 41 54 78 01 ac d6 03 b4 23 49 1b c6 f1 ff 53 55 1d 5c fb ae ad cf b6 6d db b6 6d db f6 78 d6 b6 6d db b6 77 47 57 49 ba ea fd 7a ce cd c9 c9 18 99 5f cc f7 29 76 8b 0e cc 67 c0 39 57 ea 77 3e f4 83 c6 31 db 0b c7 d3 2d c6 cb 64 e9 28 9c 9f 11 94 93 7c 17 58 5d 96 26 3e 90 df 3f 41 1b b1 99 e6 50 29 95 7d ff 2b 4c ee fd a0 c7 21 1e 67 66 c9 49 4a 29 5d 22 e9 6c 49 1e c8 0c ed 2a 51 06 bb 19 4b 0b 53 a3 76 fe 87 58 92 03 38 36 c3 02 37 3c 58 ce 86 be 8a 0f 7f 31 78 a7 9c 9e 20 70 82 60 e0 e5 dc ae 88 6d cd b8 88 18 8f 17 b6 d4 8c 71 4c ef 42 fe 20 f9 d2 8b 69 d2 a6 74 b7 e4 77 75 21 bc 09 dc a7 24 b7 4b 4a c9 15 c0 6c f6 e6 1c Data Ascii: 5B8PNGIHDR szzIDATx#ISU\mmxmwGWIz_)vg9Ww>1-d(\|X]&>?AP)}+L!gfIJ)]"lI*QKSvX867<X1x p`mqLB itwu!$KJl
2023-12-31 23:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50120	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:13 UTC	606	OUT	GET /favicon/sportmen.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:14 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:14 UTC	349	IN	Data Raw: 31 35 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 1d 49 44 41 54 78 01 62 64 60 60 f8 cf 30 80 80 89 61 80 c1 a8 03 46 1d c0 42 48 81 91 0a 07 98 5e 5e 2e 07 a6 79 38 89 73 f3 9f 7f 90 cc 25 1f 77 73 88 86 80 a5 26 17 98 de de ac 00 a6 f9 b8 20 6e 3d 7f f7 07 98 fe f5 07 7f f1 f1 f7 ef ff 21 9e 06 dc 8c 78 c0 34 3f 37 33 98 9e b2 e9 2d 98 ce 9d fe 6c 44 e5 02 04 10 e2 65 86 b8 18 ea e4 7f ff 86 7b 08 ac 38 f8 11 4c 27 bb 0b 82 e9 28 47 01 30 ed 6e cc 03 49 e5 38 42 e0 eb 0f 88 44 74 d7 63 30 7d fc fa b7 c1 1d 02 04 db 03 b2 a2 ac 60 7a 56 9e 34 de 92 90 85 89 11 4c 9b 69 70 82 e9 ef 3f 21 c6 fa d4 3d 00 d3 07 2e 7f 1d 12 21 40 39 68 4f 14 07 d3 15 61 62 60 ba 73 d5 6b 08 7f fe 8b d1 Data Ascii: 156PNGIHDR szzIDATxbd``0aFBH^^.y8s%ws& n=!x4?73-lDe{8L'(G0nI8BDtc0}`zV4Lip?!=.!@9hOab`sk
2023-12-31 23:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50122	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:14 UTC	381	OUT	GET /favicon/manner-matter.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:14 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:14 UTC	966	IN	Data Raw: 33 42 46 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 86 49 44 41 54 78 01 ec 8e 01 86 80 60 10 46 5f 05 aa fa 4b c7 48 48 00 22 02 3a 41 a0 40 47 49 d5 05 02 41 d2 2d ab d6 2c 96 2c 36 0b bb 68 18 c6 f3 f9 e6 69 4a a9 8b 3f 1c 1d e0 15 78 05 5e 81 7f 2f 70 5d 97 ec 77 fe 9c c9 fe 4e e0 38 0e 5c d7 c5 71 9c 5b 89 ae eb f8 be 7f 63 72 7b 9e 87 61 18 37 66 9a 26 b6 6d cb fd 5c 40 c2 e7 79 92 24 09 f3 3c 33 0c 83 3c 14 86 4c 59 96 ac eb 4a 1c c7 c2 44 94 28 8a 58 96 85 aa aa d0 34 4d 38 4a 29 da b6 65 1c c7 2f e1 1f 05 a4 cc b2 2c 9a a6 61 db 36 8a a2 20 cb 32 82 20 90 62 ea ba a6 ef 7b d2 34 25 0c 43 f6 7d 17 51 a6 69 22 cf 73 e1 92 fb cc 77 5d f7 c1 57 f9 83 7a 04 07 01 fc f6 d5 66 20 83 Data Ascii: 3BFPNGIHDR szzIDATx`F_KHH":A@GIA-,,6hiJ?x^/p]wN8\q[cr{a7f&m\@y$<3<LYJD(X4M8J)e/,a6 2 b{4%C}Qi"sw]Wzf
2023-12-31 23:37:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50123	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:15 UTC	669	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:15 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:37:15 GMT Expires: Sun, 31 Dec 2023 23:37:15 GMT Last-Modified: Sun, 31 Dec 2023 23:37:15 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:37:15 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50124	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:17 UTC	2623	OUT	GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065836%3Ac%3A1%3Arn%3A801238757%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1159%2C65%2C3%2C0%2C%2C2964%2C41%2C%2C%2C%2C4217%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065831950%3Afp%3A4254%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065836%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:18 UTC	1200	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 427 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:18 GMT Expires: Sun, 31-Dec-2023 23:37:18 GMT Last-Modified: Sun, 31-Dec-2023 23:37:18 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:18 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:18 UTC	427	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 75 59 58 6b 33 31 49 58 69 59 6d 64 61 43 61 55 45 2b 64 34 59 74 51 57 47 41 39 65 4e 4e 48 51 59 42 6d 59 34 47 5a 72 4e 73 31 61 35 52 2b 52 55 68 4c 6a 57 53 67 6f 65 37 35 71 6a 50 73 34 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"uYXk31IXiYmdaCaUE+d4YtQWGA9eNNHQYBmY4GZrNs1a5R+RUhLjWSgoe75qjPs4"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50125	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	2627	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065837%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:18 UTC	1144	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:18 GMT Expires: Sun, 31-Dec-2023 23:37:18 GMT Last-Modified: Sun, 31-Dec-2023 23:37:18 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:18 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50129	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	7781	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=32&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=3047981704065837004&target-id=27890696&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.35%2C%22isInIframe%22%3Afalse%2C%22w%22%3A288%2C%22h%22%3A0%2C%22width%22%3A288%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A912%2C%22top%22%3A1025%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=2232&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKnMrHktu-Bamkw5vMbuKU2B0sQfjmJnHDDwCFmjt_IP_ab-uSpJTSVWqJrLKFyPp6dz0O9MOSSgioiHICzXePI1wlHRFRFFVRVUDVRSy0_UKmlLZKr1FZoBU1VAe4GbhVUUAZO5fW4VzAFPPReUSry0la-gXncCBW-gq68wWngLTy4aho4BsYJ-Uto9oGEW0J4A9fAVGsK-mq_WVH3Ir8Ra-XNVjih2ApdT9sVrmc1zyLWJtT69PAq8nbgLC2_IhroR65XsyIdYV5FNdB75VbB4EdcBFF6wfJEKyjyCljlGBA2fbzNR2Bgb3LoG_UTFVbUbTe3BX6rCCpnAQWvuJCs50M__Yb_EBedhedu4mANrNMv4ogGxvG_GNK7piACC5mBWUF1A_zWwDvJyQ28_n85PxGdHedmgT6f5dq8xY5cMnnIG5ZWo1JrikOVrhxiVwSRbRNrxZGsxVbzxUFktVjeCCNRYPVTDXQcymPIJJ1AHDdf2eSx02yx69khpNZdRYu8JbekzW9d7rhiuUvgxb6rDIMFU8rGSqdFErEbelaXRnZsh_KmjJzkzdgJZVJLpzr298sVjshX2r0FW8WzXEfPk00tCa2YhBQaCWQoWpVaHkJK8dqh1RbGWapIp5SE4jgIPUlfU27Ni494czYQfEurqmh_6s_uP3sS986DvzUtFej97_aEYAjVmogZ2YK2dKomSj_0Qj8K4kzVCAmbwopdL2XL1DHPR6HX6Ehp0kcswcWj633gAlfmppiBoypuSJpNPkHRZ-xFOv3ChbLoKtf9DThmBVMwiXbTg3CjV6ltceSlxicTEziRePMAfJX1WjVKq9Ycp6rk_j7KPSwjDFJNgG4knFn-Vc_HQaEDNstlVY19qML9o-vAwP2a3eA4ZXRLZURQ809ZLylGG9stchRSQtfxJ4_808HoqerYl1xzCN19628ml2lKqd2qdSizoWZ6OiOZwS-0jCaWTOednRVnHHrFSKSktGtn8xlUGf0nJR0LVandbMgsH7Dnfc9e_6n0-5JLC7iIoVTEhE3zGsw3p7OpBkkXyccz2oTpiOa0jDsNrmOFigknY_dkQYvnbjYpY-VtcSBmGrEKAPlIRT6Ws81MeACmAZZcrRH_x4FUBq5CArTItdqcBtB24BblQihXT0P5lK-_M4uXv5lKgqIsjx-p_JvjRX-MkwLcPP1NMpkJ9RMFKc8KxCK_pJPRU8ZLTi_nH7pU3ee2j58_H9jxc8lw0UJ6mqYBnkmC3oX7bkFQw_R-Sh7tvjVn-2Y9t5xwHQfUL-sTHy6ziN9aCH3GznJcT6a69N7wQJeQtgVj9bKQXhX7OwQ0AhsfMjydNS7rOtOORufp2do7fHzMVi2CUC5rWdkSkdhZYeNApCycEhali59LE5W9SpsHNWHLiM-C7ooCknMwGRR89xoqjOYFlrydptjdJ_rmh82mmC-YMfKz0bwx9bW465hZEmZLnRWDgisyhx0_3Njm2v6V8Nz9kuNmNVhjBzc2y11s-GHk-iGDbKMrV1h0A2ypgnV52K-jN8miqSijBAhpX2CrCWEwoRTluLZvWeQsifhlzLGnCrYBJO2Kq-pX3UeKOqGT4SvIBmADdl_xln-yOynZLNmR-ZVwgxo_iYzRgLK-cAbG6nbWZqo50KrOK_s9ys6db9OGJu3bAtTLXUf0vdW5c3PoRy06lD4IIqWLtxYGhZMG247l6w4vN-jiZE4Ili7uiG6kSUCYzz1DxvuCg_ynDJZcMh0BvGKd18vUrO3DuP55pz2Hm9JdC8K6pCvWA_Py4GZav1cTPLKuIRfpeEsG4XwctZBp-PW-4CSXjLieVDllDrhZGt9jK6Zh_gJqkfDL9guL43Hu9C9IP8-0ocx9FxmIMA_m_sV6Wr8lMUxbEPMkn28YRVXGYZE4syI87L2GeNlxYmG2M8bIhgvS94556s6blGHsCpFtuX58YN_jQqtl5JGyAP9s6WDPKH1yVgg6zLxloaUs4hNIIscloOMtS_mctF1YIaogEjOmb8SZLiJSIpeQaGfDDQ4gJtXSFveUm0lAvBlaB_FeqLSOgQ10FBUOhh7E3dQUBTqoluaJtLpdouXxgl9A1LxirIwovZ2hzT6ZY0ncNCZniMxshtiFKyzcVeFeKdVWuK5kBRAtg6JxeichI4HWgXF9hzAOJOSOCDgC00neaRpDgSqOY6Q7MMEHbXygEQH8&uniformat=true&callback=Ya%5B2230187145163%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:37:18 UTC	1354	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065838698137-4265098355331021150-balancer-l7leveler-kubr-yp-vla-162-BAL-3614 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:18 GMT expires: Sun, 31 Dec 2023 23:37:18 GMT last-modified: Sun, 31 Dec 2023 23:37:18 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:37:18 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: MediaCreative x-xss-protection: 1; mode=block
2023-12-31 23:37:19 UTC	7330	IN	Data Raw: 31 43 39 41 0d 0a 7b 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 69 73 53 74 61 66 66 22 3a 22 66 61 6c 73 65 22 2c 22 77 68 79 54 68 69 73 41 64 4c 61 6e 64 69 6e 67 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 72 65 61 73 6f 6e 73 2e 79 61 6e 64 65 78 2d 74 65 61 6d 2e 72 75 2f 3f 68 69 74 6c 6f 67 69 64 3d 37 38 33 36 32 38 30 37 33 38 34 38 31 34 39 39 30 38 38 22 2c 22 73 73 70 49 64 22 3a 22 22 2c 22 70 61 67 65 4c 61 6e 67 22 3a 22 31 22 2c 22 64 65 74 61 69 6c 65 64 44 65 76 69 63 65 54 79 70 65 22 3a 33 33 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 6d 65 64 69 61 2d 63 72 65 61 74 69 76 65 22 2c 22 Data Ascii: 1C9A{"common":{"pageId":"3797907","deviceType":"6","sspBidId":"","isStaff":"false","whyThisAdLandingLink":"https://adreasons.yandex-team.ru/?hitlogid=7836280738481499088","sspId":"","pageLang":"1","detailedDeviceType":33,"productType":"media-creative","
2023-12-31 23:37:19 UTC	23	IN	Data Raw: 31 31 0d 0a 4c 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 0d 0a Data Ascii: 11L":[{"value":"TRU
2023-12-31 23:37:19 UTC	8159	IN	Data Raw: 31 46 44 37 0d 0a 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 45 43 4f 4d 5f 43 54 41 5f 53 4d 41 4c 4c 5f 57 49 54 48 5f 54 45 58 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 52 45 53 54 41 52 54 5f 4d 55 54 45 44 5f 4f 4e 5f 45 52 52 4f 52 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 35 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 32 31 30 36 22 7d 5d 2c 22 53 45 4e 44 5f 44 49 53 41 42 4c 45 44 5f 41 44 5f 54 59 50 45 5f 49 4e 5f 50 4f 57 45 52 45 46 46 49 43 49 45 4e 43 59 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 65 78 70 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 38 30 37 34 22 7d 5d 2c 22 56 41 53 5f 41 44 44 5f 45 4e 41 42 4c 45 5f Data Ascii: 1FD7E","testId":"878444"}],"VAS_ECOM_CTA_SMALL_WITH_TEXT":[{"value":"TRUE","testId":"878444"}],"VAS_RESTART_MUTED_ON_ERROR":[{"value":"5","testId":"892106"}],"SEND_DISABLED_AD_TYPE_IN_POWEREFFICIENCY":[{"value":"exp","testId":"898074"}],"VAS_ADD_ENABLE_
2023-12-31 23:37:19 UTC	14	IN	Data Raw: 39 0d 0a 4b 6a 47 61 4f 4c 75 4d 30 0d 0a Data Ascii: 9KjGaOLuM0
2023-12-31 23:37:19 UTC	8167	IN	Data Raw: 31 46 44 46 0d 0a 55 53 51 48 39 63 77 79 58 41 76 69 70 57 4e 4c 56 51 37 31 47 41 67 73 38 41 4b 32 6e 76 75 54 31 66 69 6d 31 63 49 6f 6a 77 78 65 55 38 77 50 58 6e 34 46 57 32 73 39 78 6f 38 65 4f 66 66 6b 32 6f 30 72 33 30 45 51 52 42 4b 71 7a 30 51 57 63 54 74 68 74 5a 68 78 69 6e 54 57 53 65 56 6e 75 58 77 6b 67 68 53 6a 5f 5a 76 6d 61 53 53 42 77 42 51 74 68 55 67 45 4a 39 34 76 4f 68 72 71 6b 77 48 6c 42 62 4b 67 62 71 6a 68 33 6f 6d 5a 52 42 76 4c 56 32 6d 38 2d 64 5a 72 36 57 59 61 32 32 46 6f 70 37 65 30 34 46 34 5f 48 50 75 53 6d 31 64 4c 74 51 52 6d 34 6f 54 78 74 35 42 46 79 74 52 68 34 66 6d 43 30 7e 32 22 2c 22 70 75 6e 79 44 6f 6d 61 69 6e 22 3a 22 6d 6b 2d 72 6e 73 2e 72 75 22 2c 22 70 6f 73 74 65 72 53 72 63 22 3a 22 68 74 74 70 73 3a Data Ascii: 1FDFUSQH9cwyXAvipWNLVQ71GAgs8AK2nvuT1fim1cIojwxeU8wPXn4FW2s9xo8eOffk2o0r30EQRBKqz0QWcTthtZhxinTWSeVnuXwkghSj_ZvmaSSBwBQthUgEJ94vOhrqkwHlBbKgbqjh3omZRBvLV2m8-dZr6WYa22Fop7e04F4_HPuSm1dLtQRm4oTxt5BFytRh4fmC0~2","punyDomain":"mk-rns.ru","posterSrc":"https:
2023-12-31 23:37:19 UTC	6	IN	Data Raw: 31 0d 0a 61 0d 0a Data Ascii: 1a
2023-12-31 23:37:19 UTC	8175	IN	Data Raw: 31 46 45 37 0d 0a 53 2d 62 4b 41 5a 75 54 76 76 38 6c 41 5f 4c 30 47 42 75 69 70 66 30 30 39 62 63 31 39 67 4f 50 47 77 79 6b 67 78 68 4d 44 68 69 72 5f 32 38 39 44 41 44 30 62 31 44 78 6c 49 55 47 73 54 7a 37 51 36 4d 62 4a 54 78 48 72 5f 73 4f 63 68 50 45 61 5f 73 4f 63 6f 45 4b 37 76 43 55 5f 30 45 4c 72 4c 52 62 5f 5f 36 6a 41 71 66 55 56 46 55 38 6f 54 39 64 42 31 2d 49 2d 6b 77 74 6b 57 61 59 48 46 4d 51 74 74 4b 65 58 34 69 47 37 6e 4d 58 66 33 6f 74 64 39 39 74 72 59 6b 4c 32 67 4c 72 58 76 55 48 6a 58 55 72 74 4b 43 6f 71 64 62 50 5f 36 70 65 4f 43 55 38 79 34 4b 30 49 4e 79 4e 70 64 48 6b 77 77 57 44 49 71 5a 41 58 5a 63 5f 56 72 44 79 4f 32 7a 6d 6f 43 6b 74 70 39 78 55 34 39 2d 42 78 55 6c 4e 4e 62 58 47 73 4f 39 6f 6c 71 2d 4c 44 6d 62 74 67 Data Ascii: 1FE7S-bKAZuTvv8lA_L0GBuipf009bc19gOPGwykgxhMDhir_289DAD0b1DxlIUGsTz7Q6MbJTxHr_sOchPEa_sOcoEK7vCU_0ELrLRb__6jAqfUVFU8oT9dB1-I-kwtkWaYHFMQttKeX4iG7nMXf3otd99trYkL2gLrXvUHjXUrtKCoqdbP_6peOCU8y4K0INyNpdHkwwWDIqZAXZc_VrDyO2zmoCktp9xU49-BxUlNNbXGsO9olq-LDmbtg
2023-12-31 23:37:19 UTC	8169	IN	Data Raw: 31 46 45 31 0d 0a 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 31 35 30 70 78 29 7d 2e 61 61 63 63 65 34 30 31 37 2e 6b 38 36 35 62 39 35 32 65 2c 2e 61 61 63 63 65 34 30 31 37 20 2e 6a 31 32 66 62 63 34 38 36 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 61 63 63 65 34 30 31 37 20 2e 6a 31 32 66 62 63 34 38 36 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 7d 2e 61 61 63 63 65 34 30 31 37 20 2e 74 63 38 38 36 35 32 31 63 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 68 73 6c Data Ascii: 1FE100%,.6),hsla(0,0%,100%,0) 150px)}.aacce4017.k865b952e,.aacce4017 .j12fbc486{top:0;left:0;height:100%;overflow:hidden}.aacce4017 .j12fbc486{-webkit-transform:scaleX(-1);transform:scaleX(-1)}.aacce4017 .tc886521c{-webkit-mask:linear-gradient(90deg,hsl
2023-12-31 23:37:19 UTC	12	IN	Data Raw: 37 0d 0a 74 69 6f 6e 3a 63 39 0d 0a Data Ascii: 7tion:c9
2023-12-31 23:37:19 UTC	8161	IN	Data Raw: 31 46 44 39 0d 0a 37 34 38 66 36 66 33 20 31 30 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 39 37 34 38 66 36 66 33 20 31 30 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 7d 2e 6b 39 31 38 64 35 33 31 20 2e 6a 31 32 66 62 63 34 38 36 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 63 35 35 33 37 64 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 33 33 35 64 65 67 2c 23 62 37 62 35 65 38 20 30 2c 23 62 66 62 64 65 62 20 37 25 2c 23 63 36 63 34 65 64 20 31 39 25 2c 23 63 65 63 63 66 30 20 33 32 25 2c 23 64 36 64 34 66 32 20 34 35 25 2c 23 64 65 64 63 66 34 20 35 39 25 2c 23 65 39 65 37 66 38 20 37 31 25 2c 23 66 30 Data Ascii: 1FD9748f6f3 10s ease-in-out infinite;animation:c9748f6f3 10s ease-in-out infinite}.k918d531 .j12fbc486{display:none}.pc5537d0{background-image:-o-linear-gradient(335deg,#b7b5e8 0,#bfbdeb 7%,#c6c4ed 19%,#ceccf0 32%,#d6d4f2 45%,#dedcf4 59%,#e9e7f8 71%,#f0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50127	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	2611	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065833_71ad6d1aad595bd3d11a412502e87d5dbb0a3290c9dc2bb59aa35d8426772947&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065837%3Ac%3A1%3Arn%3A223604385%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065837%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(20900)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:18 UTC	1144	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:18 GMT Expires: Sun, 31-Dec-2023 23:37:18 GMT Last-Modified: Sun, 31-Dec-2023 23:37:18 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:18 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50128	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	2402	OUT	POST /watch/3797907/1?page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065833_71ad6d1aad595bd3d11a412502e87d5dbb0a3290c9dc2bb59aa35d8426772947&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065837%3Ac%3A1%3Arn%3A994044010%3Arqn%3A5%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C561%2C1440%2C273%2C3%2C0%2C%2C102%2C3%2C2639%2C2639%2C1%2C2392%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Afp%3A2138%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065837&t=mc(p-2-h-1)clc(0-0-0)rqnt(1)lt(20900)aw(0)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%228664901704065829155%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:18 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:18 GMT Expires: Sun, 31-Dec-2023 23:37:18 GMT Last-Modified: Sun, 31-Dec-2023 23:37:18 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50131	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	1405	OUT	GET /an/tracking/WYeejI_zOoVX2Lc20UKG0BFVUJw4s8S8Un2D7aGP19FlikB5R7ziv8ArqyZSATDFTiXBVMTiuecMbfQMbfREZZC1Ofz3jgTHwJrjVlXheGNNz25Cmttm5b24IzE7tODWf8Unp-BubGF49WuMUX2NS1v0nwaYBL9wvY8WLN23vuJqEeE3NTvyRVGWoRcgi4N8g28Sp0Hm43D0XxTXl8GIRn2FEDAapPjb8SdWHQUzAnh6leRSB0ip-QeP6sdvJjQ89zI4SVgez1em0rWXDLochfDrlKRtPnfmrf4N0YHLOAD304McNZm2s680Ar904IvD6FGXSXETsGaJ9-8Bt19EO0jxYhShO4nLPBSj5hObdC0MmDWPSbEcKTcS2QnxCg6dL5eHO_b0ji8WK-Q0JDO4sMr64Q0CLHIAC2de4xmJp4pmX4QO2UMchjCnkWL7cEyGU0PB4zEA6AQRWiWDGm3ccorDFO_roHvsi1-kCRdbWozyQV-tmXRQzrROGljS2tzL_iu0LiZNEfdsdtKoxKppXYtCCWTUNTTrB6qMW6foftSlffQjysGlnkO8vSSxN5LjOFuRqxQcvCrxZvmaSOBoMrhNzKOdIPoWlDP7BHffZF9PVtO5yb674vGdYrvdpeYP0s6vf6yiLogLIciFBo5i6glys1iKJ2YLIcKE_1EKCK3U9OIHM-T1OTk2p9dkXMH0eSG9clySVkTxtV2Z7uVwzOL1qY_kGQLbCKdpVm00~2?action-id=11 HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:37:19 UTC	1045	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:18 GMT Expires: Sun, 31 Dec 2023 23:37:18 GMT Last-Modified: Sun, 31 Dec 2023 23:37:18 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065838938143-6144602099143848619-balancer-l7leveler-kubr-yp-vla-76-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50130	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	2385	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065831%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:19 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:18 GMT Expires: Sun, 31-Dec-2023 23:37:18 GMT Last-Modified: Sun, 31-Dec-2023 23:37:18 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:19 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 37 75 42 64 43 68 6d 61 58 6a 41 36 59 65 63 55 52 6c 6c 67 70 76 70 71 6b 2f 35 4f 2b 2b 6c 34 6b 61 33 44 75 34 4f 74 34 39 72 4b 36 4f 55 55 6a 46 41 53 6e 35 48 4f 44 4d 71 30 58 63 72 43 22 2c 20 22 62 22 3a 22 70 34 6d 45 2f 35 75 53 44 51 35 4e 31 35 65 6c 45 63 79 7a 51 50 2b 2b 45 69 72 4f 49 4b 66 34 77 6b 76 45 73 43 4c 67 44 5a 63 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 33 38 5f 32 34 65 30 31 33 63 66 39 63 62 62 62 65 65 34 33 39 61 62 61 35 64 61 65 31 65 39 39 35 61 39 34 38 61 34 37 62 37 30 66 30 63 63 31 36 39 65 61 66 31 65 33 61 39 61 33 35 37 38 36 64 32 36 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"7uBdChmaXjA6YecURllgpvpqk/5O++l4ka3Du4Ot49rK6OUUjFASn5HODMq0XcrC", "b":"p4mE/5uSDQ5N15elEcyzQP++EirOIKf4wkvEsCLgDZc="},"eu":2,"hittoken":"1704065838_24e013cf9cbbbee439aba5dae1e995a948a47b70f0cc169eaf1e3a9a35786d26"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50132	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	412	OUT	GET /get-canvas/5414461/2a0000018ad201d642545894fbb44d3bf70b/cropSource HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:19 UTC	593	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:18 GMT Content-Type: image/jpeg Content-Length: 114836 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 26 Sep 2023 15:24:59 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 8ac113108c313d50 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:37:19 UTC	15791	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 03 20 04 6b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 02 00 01 03 04 05 06 07 08 09 ff c4 00 60 10 00 01 03 02 04 02 05 06 06 0b 0d 04 08 06 01 05 01 00 02 03 04 11 05 12 21 31 06 41 13 22 51 61 71 07 14 81 91 a1 b1 23 32 72 Data Ascii: JFIFC!"$"$C k"`!1A"Qaq#2r
2023-12-31 23:37:19 UTC	16384	IN	Data Raw: b6 be 46 78 c9 8d 91 4a 86 09 e4 c5 2a e7 7c ae 91 b9 9c c1 72 2c dd b4 00 7b ca ce e2 4e 1d 96 73 15 56 66 74 52 bf a3 79 fc 42 74 04 f7 2d fc 0c 99 71 3a d6 d8 b5 b2 02 f0 34 b5 f4 05 69 3e 26 b6 9e 6a 69 62 12 b1 e2 f6 27 9a f6 6b 2b 8c f1 79 3c b5 93 c5 f8 7a 91 f8 56 23 26 1b 5c c0 61 75 41 34 ef bd f2 3c 1b 69 d9 7d bd 2b d3 30 6a 56 62 78 2d 66 0d 39 eb 1e bc 47 f1 5e 36 3e bf 7a d7 97 87 28 71 1c 04 53 cf 49 1b 67 6b 4f 47 26 5b 39 ae e4 6e b1 30 79 5d 4d 88 43 29 d0 90 1a ff 00 72 ed 8c d4 ed 8c ae ef 4a 14 d5 83 1c c2 8e 09 88 5a 3a c8 01 6b 1e 46 ae b7 23 de b8 1c 32 9e 5c 0b 8d 63 64 a2 d1 c8 4b 49 1b 10 74 f6 1b 7a 97 a2 63 34 3e 6b e5 0a 09 5a 2c ca 97 b6 56 db bf 43 ed 05 5b e2 ce 14 a3 c6 9a ca 86 97 41 55 11 bb 5c c3 60 fe d0 7c 7b 52 e2 Data Ascii: FxJ*\|r,{NsVftRyBt-q:4i>&jib'k+y<zV#&\auA4<i}+0jVbx-f9G^6>z(qSIgkOG&[9n0y]MC)rJZ:kF#2\cdKItzc4>kZ,VC[AU\`\|{R
2023-12-31 23:37:19 UTC	16384	IN	Data Raw: 94 62 f8 d0 68 e5 d3 cb f5 a9 e1 4f 28 fa 69 33 b6 5f 36 47 c5 bc 65 08 b0 c5 f1 42 07 e3 17 3b de 14 ac e3 9e 30 84 e7 76 2d 58 3e 5b 2e 3d 44 27 85 37 1f 45 1b 59 72 dc 2e 7f 85 f8 a7 fb d8 7f e5 69 d7 91 8f 2a 5c 54 34 38 dd 3e 9b de 08 af f3 53 e1 1e 51 31 ca 29 ab 26 89 f4 73 ba b2 7e 9e 62 f8 f7 7e 46 b2 e3 29 16 ea b1 aa 78 d5 99 47 b8 4b cd 67 55 7c 62 bc c3 fe 94 71 b3 ab e9 28 48 e7 66 38 7f 99 23 e5 2e bd e3 af 87 52 fa 0b be b5 64 a7 b7 7b 3e ea 12 b8 71 e5 0d c4 1e 97 0c 6b af b6 59 6d f4 14 6d f2 81 4e 47 5b 0d 94 78 4a 0f d0 b4 c6 9d 81 51 9d d7 2e de 3c c3 4f c6 a5 aa 6f e8 9f a5 13 78 df 07 3f 19 95 4d ff 00 00 fa d0 8e 97 92 65 81 1f 19 60 8f de 59 99 f2 a3 52 b3 8a f0 07 6d 5e d1 e3 1b fe a4 6a 36 6e 87 9a cd 6f 10 e0 6e db 12 a7 f4 9b Data Ascii: bhO(i3_6GeB;0v-X>[.=D'7EYr.i*\T48>SQ1)&s~b~F)xGKgU\|bq(Hf8#.Rd{>qkYmmNG[xJQ.<Oox?Me`YRm^j6non
2023-12-31 23:37:19 UTC	16384	IN	Data Raw: b1 67 72 2c 96 b9 ac 57 0d 9f 00 e2 a7 50 bd cc 92 5a 69 7a 39 1f 1e ad 23 36 52 47 72 dd 07 45 9f c7 d8 95 75 7f 18 d7 4c dc 32 7a 3c e4 b7 25 48 b3 c0 33 5c 5c 5f 43 7d 0e fc d5 71 45 8c 54 39 c6 a7 12 14 e2 e4 b4 41 b8 07 b0 d8 5b d3 73 de 9e 77 ea 35 31 fd d6 3f 19 40 29 ab e2 a9 85 c6 37 4c d2 48 07 47 65 20 1b 8e 7a 38 22 c2 b1 47 32 7b 38 8b 92 34 6b cd 9c 3c 3e 9e 7c d6 c5 76 18 f9 30 ee 8f ce 6a 2a 26 89 b6 85 d3 3f 36 41 7b 96 34 6c d6 93 72 40 e6 57 13 26 78 5c f8 9c d7 83 72 5b 7e ab 98 7b ae b5 37 ae d8 bf e1 e8 97 0e 6e 60 74 54 ea 58 0d d5 6e 1f ab e9 a8 fa 27 13 9d 9b dc ea ad ce 74 2b 50 73 18 e5 38 2c 75 82 f3 9e 21 8f a3 79 f1 5e 9f 8e 1e a1 f0 5e 6b c5 1f 19 de 2b 19 11 cf 13 a9 ec 56 30 b6 e6 c4 69 9b db 33 07 b5 55 71 ee 56 f0 92 06 Data Ascii: gr,WPZiz9#6RGrEuL2z<%H3\\_C}qET9A[sw51?@)7LHGe z8"G2{84k<>\|v0j*&?6A{4lr@W&x\r[~{7n`tTXn't+Ps8,u!y^^k+V0i3UqV
2023-12-31 23:37:19 UTC	16384	IN	Data Raw: 24 b1 ca 39 a7 63 2c 6e 75 27 9a 01 8a 3c a2 ee d4 a1 6b c3 a6 22 da 01 ba 29 9c 6f 94 20 69 8d 8e 17 7b 41 b6 ba a2 27 1a 6c ba ef 24 ff 00 ca cf fc cd df ad 2b 8c e9 63 26 c2 46 93 e2 bb 3f 24 df ca cf fc cd df ad 2b 9f 27 a7 4e 3f ec f4 b1 ba 20 80 77 29 1a 0e 97 5e 57 a8 4c 16 be c8 93 01 64 4d 51 44 11 21 6a 20 2e 91 60 92 09 7a 13 b7 5b 8b 7a 54 a1 c0 23 54 ed dc a5 7e 49 05 a0 4d 46 36 28 5a 8b 96 ea 0f 51 69 fb 65 bd cc df fc 2c 56 30 d9 44 58 b5 3c 84 e8 c9 43 8f 80 21 65 d5 56 c3 4f 56 c6 c8 fc b9 99 af 70 ca cd fb 3f 62 13 89 51 b8 16 45 3c 6e 91 c2 c0 5f 5f f5 f5 2f 4e 32 e9 e7 be d0 53 ba 4a f9 ab 64 73 c0 74 8f 7c a6 fd 9b 95 ec fd 23 43 03 4b 86 80 0b 05 e3 34 bd 14 12 55 46 6a 1b 1c fd 13 ef 10 6d cb 43 8e 86 fb 0d c6 97 5d e6 3f c5 12 61 Data Ascii: $9c,nu'<k")o i{A'l$+c&F?$+'N? w)^WLdMQD!j .`z[zT#T~IMF6(ZQie,V0DX<C!eVOVp?bQE<n__/N2SJdst\|#CK4UFjmC]?a
2023-12-31 23:37:19 UTC	16384	IN	Data Raw: 67 48 e7 f0 ec 2b 95 58 ec b8 57 13 7e 25 87 b8 54 80 ca ea 67 74 55 4c 1f 8d c9 c3 b9 c3 55 b0 db 2f 3c a4 ab 9f 06 c5 62 c4 27 8d d1 98 ed 05 7c 64 6a 63 27 47 ff 00 84 eb e0 bd 0d 84 10 08 21 c0 ec 41 d0 ae 76 3d 5c 59 6e 08 0b 27 01 35 b5 46 d1 75 97 69 1e 8e 07 db 00 7f 53 fc ac 5a 78 3f f2 b5 20 fe d9 9f 38 2c f8 db 7a c6 fe 4f 5f d1 62 d3 c2 00 fb 29 4b 7b 7d d9 9e f5 e9 c1 e6 c9 eb 83 6d 55 3c 6f f9 26 af f2 4e f7 15 77 92 a5 8d 7f 24 d5 7e 49 de e5 e9 79 27 b4 18 0d b3 d4 01 b7 57 de e5 ae cb d9 64 60 7f 1e a3 9f c5 f7 b9 6b c7 a8 43 ec 40 21 9e 08 67 89 d1 4f 13 25 8d c2 ce 6b da 08 3e 82 88 22 0a 55 8e 03 89 bc 92 70 ae 2c 1c fa 38 0e 17 39 d7 35 38 ea 1f 16 1d 3d 56 5e 41 c6 de 48 f8 93 06 6c 95 14 f4 ed c4 a9 1a 74 92 98 12 f0 3b 4b 37 1e 8b Data Ascii: gH+XW~%TgtULU/<b'\|djc'G!Av=\Yn'5FuiSZx? 8,zO_b)K{}mU<o&Nw$~Iy'Wd`kC@!gO%k>"Up,8958=V^AHlt;K7
2023-12-31 23:37:19 UTC	16384	IN	Data Raw: d4 b4 7b 5a 4f d3 42 ea 6a 4f ed 3f 4c 2b 04 ce 94 8d e5 1f a4 7e b4 02 a6 30 ed 6a 58 de e3 20 fa 4a 85 d4 74 af 3a 87 1f 17 84 c3 0f a4 fc 5f 6b 7e a4 90 e9 63 ce e3 b9 fb 66 2f 4c 81 33 aa 1b b8 9d 9f a6 0a 84 61 f4 dc 98 4f 83 93 3e 86 00 0d da ef 5d d3 41 df 2c 2e 79 2f 7c 37 b6 e6 41 74 51 55 36 30 43 2a 62 db 4c d2 83 fb 4f ad 57 34 14 a7 5c 8e f6 a5 e6 34 c3 66 1f 0b a5 16 5d 5a 7a 32 7e 01 cf 03 40 d9 46 a7 c0 fd 6a 84 d5 24 12 f9 34 71 dc 9d bc 2f b2 94 51 d2 8d 43 7d 4f 4c ca 5a 77 dc 35 ae f4 9b 22 cb a5 6e 90 34 12 e7 5c f7 20 63 9f 3b c9 f8 ac 1a 93 c8 2b 4e c3 a8 c1 cc 45 88 e6 1e 6f ec 4c 68 98 5a 1b 0c e5 ad 1c 9c 01 1e 3c 8f ad 58 be 49 61 ca c6 da f6 6f 2d 7d a7 bd 0c 92 33 36 ae 55 e4 a6 ab 6d c5 db 20 e4 5a f1 f4 da ca 9b a4 2c 24 4a Data Ascii: {ZOBjO?L+~0jX Jt:_k~cf/L3aO>]A,.y/\|7AtQU60C*bLOW4\4f]Zz2~@Fj$4q/QC}OLZw5"n4\ c;+NEoLhZ<XIao-}36Um Z,$J
2023-12-31 23:37:19 UTC	741	IN	Data Raw: 3a 8b 89 ea ba a4 36 62 25 6f a7 7f 6d d6 b6 0b 37 9d 70 64 60 9b be 96 67 30 df f1 4e a3 e9 5a 9e 59 28 83 99 49 88 31 bf 14 98 9d e0 75 1f 4a e7 38 0e 51 23 71 2c 3d da f4 d0 67 60 fe b3 4d fd d7 5e ce 0c bc f8 de 4e 59 e1 c8 8e 66 b5 b7 20 2a ce ef 56 e6 d8 85 4c b8 5e c5 66 40 ae 40 bd d0 89 0f 62 22 00 69 50 6d 7b 2b 09 16 63 94 80 6c a6 82 5d 0d f7 54 98 e2 1a 48 3b a9 22 cc e2 1a 35 25 34 b1 6d 8e 37 36 1a 72 ba 92 39 2c ab ba e0 64 cb 72 39 a9 1a d2 c1 ab 6c a7 d2 ed 71 92 92 01 d5 68 50 d4 35 b6 04 ac 96 39 ce db 55 72 18 dd 95 b7 d5 c5 73 ca 4d 37 8d 74 b4 73 10 e6 d8 92 01 e4 bd df c9 6d 60 97 0b 0d 6f 54 33 43 70 be 79 a3 e9 1a 1a 6d b7 6a f6 0f 23 f8 a0 12 c9 4a e2 05 c0 3a af 3f 24 fb 75 c7 b8 f6 ac 3a cf 98 39 b6 b8 b5 c8 0b d0 f0 77 7d aa Data Ascii: :6b%om7pd`g0NZY(I1uJ8Q#q,=g`M^NYf *VL^f@@b"iPm{+cl]TH;"5%4m76r9,dr9lqhP59UrsM7tsm`oT3Cpymj#J:?$u:9w}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50137	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	392	OUT	GET /get-direct/5235951/_YTYfRylGb2kyKOb3jGtew/x180 HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:19 UTC	567	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:18 GMT Content-Type: image/jpeg Content-Length: 8460 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Thu, 28 Dec 2023 14:29:29 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 330e6f9c4e7b4d76 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]}
2023-12-31 23:37:19 UTC	8460	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 00 b4 00 b4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 00 02 07 01 08 ff c4 00 4a 10 00 01 03 03 02 03 04 06 07 05 04 06 0b 00 00 00 01 02 03 11 00 04 21 05 12 13 31 41 14 22 51 61 06 23 32 71 81 91 15 42 92 a1 b1 Data Ascii: JFIFHHC!"$"$C"J!1A"Qa#2qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50133	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:18 UTC	415	OUT	GET /get-yabs_performance/7731570/2a0000018442f63b164e0c1f14366fe3af77/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:19 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:18 GMT Content-Type: image/jpeg Content-Length: 6551 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 04 Nov 2022 14:05:44 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 3c6cab357a460751 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]} Timing-Allow-Origin: *
2023-12-31 23:37:19 UTC	6551	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 a6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 05 04 06 07 03 08 ff c4 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 e6 08 01 00 21 72 01 Data Ascii: JFIFHHC!"$"$C"!r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50134	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:19 UTC	385	OUT	GET /favicon/solargameprotect.com?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:19 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:19 UTC	647	IN	Data Raw: 32 38 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 47 49 44 41 54 78 01 c4 97 35 70 1b 61 14 84 f7 3d 59 10 56 5f a9 2f 0c 5d 18 ea 30 33 73 15 a5 9f 31 f4 8d d2 84 c1 cc 6c d7 61 68 95 be 51 5f 98 51 f2 dd 8b b7 ca dc 58 8c df 8c aa 83 dd 07 37 da 5f 90 27 67 ee 44 c3 21 67 f9 8c b9 7a c4 c4 1a 05 16 01 24 0c 10 9b 33 48 42 4c e2 06 fb 9a f4 6f 9f 18 6f 8f cd 21 0f 04 39 b8 72 e7 49 c4 92 16 85 ba b7 41 c1 7c 31 69 17 bf b4 f5 b7 bf 4e 14 65 80 15 07 9d 95 16 18 a2 28 05 43 6c a0 e7 ed f3 bc 0c 78 aa 4e b9 5f 20 88 a0 1c 18 12 e2 d7 63 e9 ba a1 f0 82 6b 77 1e 36 96 53 9c f0 5d 7c e7 c5 6b 0f 1b b3 1a 60 e5 4e 4a c6 ca 28 ee 31 a1 22 63 d4 48 6b 80 33 cf 54 79 b9 3b 71 e6 ce 9d f0 16 Data Ascii: 280PNGIHDR szzGIDATx5pa=YV_/]03s1lahQ_QX7_'gD!gz$3HBLoo!9rIA\|1iNe(ClxN_ ckw6S]\|k`NJ(1"cHk3Ty;q
2023-12-31 23:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50135	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:19 UTC	376	OUT	GET /favicon/sportmen.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:19 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:19 UTC	349	IN	Data Raw: 31 35 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 01 1d 49 44 41 54 78 01 62 64 60 60 f8 cf 30 80 80 89 61 80 c1 a8 03 46 1d c0 42 48 81 91 0a 07 98 5e 5e 2e 07 a6 79 38 89 73 f3 9f 7f 90 cc 25 1f 77 73 88 86 80 a5 26 17 98 de de ac 00 a6 f9 b8 20 6e 3d 7f f7 07 98 fe f5 07 7f f1 f1 f7 ef ff 21 9e 06 dc 8c 78 c0 34 3f 37 33 98 9e b2 e9 2d 98 ce 9d fe 6c 44 e5 02 04 10 e2 65 86 b8 18 ea e4 7f ff 86 7b 08 ac 38 f8 11 4c 27 bb 0b 82 e9 28 47 01 30 ed 6e cc 03 49 e5 38 42 e0 eb 0f 88 44 74 d7 63 30 7d fc fa b7 c1 1d 02 04 db 03 b2 a2 ac 60 7a 56 9e 34 de 92 90 85 89 11 4c 9b 69 70 82 e9 ef 3f 21 c6 fa d4 3d 00 d3 07 2e 7f 1d 12 21 40 39 68 4f 14 07 d3 15 61 62 60 ba 73 d5 6b 08 7f fe 8b d1 Data Ascii: 156PNGIHDR szzIDATxbd``0aFBH^^.y8s%ws& n=!x4?73-lDe{8L'(G0nI8BDtc0}`zV4Lip?!=.!@9hOab`sk
2023-12-31 23:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50136	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:19 UTC	374	OUT	GET /favicon/mk-rns.ru?size=32&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:19 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:19 UTC	1471	IN	Data Raw: 35 42 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 05 7f 49 44 41 54 78 01 ac d6 03 b4 23 49 1b c6 f1 ff 53 55 1d 5c fb ae ad cf b6 6d db b6 6d db f6 78 d6 b6 6d db b6 77 47 57 49 ba ea fd 7a ce cd c9 c9 18 99 5f cc f7 29 76 8b 0e cc 67 c0 39 57 ea 77 3e f4 83 c6 31 db 0b c7 d3 2d c6 cb 64 e9 28 9c 9f 11 94 93 7c 17 58 5d 96 26 3e 90 df 3f 41 1b b1 99 e6 50 29 95 7d ff 2b 4c ee fd a0 c7 21 1e 67 66 c9 49 4a 29 5d 22 e9 6c 49 1e c8 0c ed 2a 51 06 bb 19 4b 0b 53 a3 76 fe 87 58 92 03 38 36 c3 02 37 3c 58 ce 86 be 8a 0f 7f 31 78 a7 9c 9e 20 70 82 60 e0 e5 dc ae 88 6d cd b8 88 18 8f 17 b6 d4 8c 71 4c ef 42 fe 20 f9 d2 8b 69 d2 a6 74 b7 e4 77 75 21 bc 09 dc a7 24 b7 4b 4a c9 15 c0 6c f6 e6 1c Data Ascii: 5B8PNGIHDR szzIDATx#ISU\mmxmwGWIz_)vg9Ww>1-d(\|X]&>?AP)}+L!gfIJ)]"lI*QKSvX867<X1x p`mqLB itwu!$KJl
2023-12-31 23:37:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50139	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:19 UTC	2503	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:19 UTC	1144	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:19 GMT Expires: Sun, 31-Dec-2023 23:37:19 GMT Last-Modified: Sun, 31-Dec-2023 23:37:19 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50138	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:19 UTC	2635	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1)gdpr(14) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:19 UTC	1144	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:19 GMT Expires: Sun, 31-Dec-2023 23:37:19 GMT Last-Modified: Sun, 31-Dec-2023 23:37:19 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:19 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50140	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:21 UTC	2375	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003720%3Aet%3A1704065840%3Ac%3A1%3Arn%3A330016578%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065840%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(83400)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:21 UTC	1200	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:21 GMT Expires: Sun, 31-Dec-2023 23:37:21 GMT Last-Modified: Sun, 31-Dec-2023 23:37:21 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:21 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:21 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 70 52 65 2f 33 76 50 59 30 33 53 54 47 39 58 4d 63 66 78 70 31 52 34 6c 7a 62 67 6e 44 6c 6f 31 4f 5a 56 73 67 2f 30 6a 47 73 6c 4a 77 7a 4f 4c 71 34 54 31 51 41 46 67 6e 42 51 49 68 77 5a 62 22 2c 20 22 62 22 3a 22 64 48 70 44 5a 55 2b 67 30 59 46 75 73 35 51 36 52 31 71 74 4a 37 55 36 6d 6b 4d 4b 2b 38 4f 31 6e 2b 71 52 77 6d 63 4e 4f 6c 63 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 34 31 5f 31 33 66 31 33 38 36 62 39 37 34 63 64 62 66 63 63 34 63 39 35 30 31 39 30 30 64 65 39 39 65 35 39 39 66 38 62 63 32 31 31 31 62 35 62 35 30 31 31 34 30 61 39 38 32 33 36 34 39 65 64 30 39 61 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"pRe/3vPY03STG9XMcfxp1R4lzbgnDlo1OZVsg/0jGslJwzOLq4T1QAFgnBQIhwZb", "b":"dHpDZU+g0YFus5Q6R1qtJ7U6mkMK+8O1n+qRwmcNOlc="},"eu":2,"hittoken":"1704065841_13f1386b974cdbfcc4c9501900de99e599f8bc2111b5b501140a9823649ed09a"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50141	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:21 UTC	841	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 303 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:21 UTC	303	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 38 30 37 33 38 34 38 31 34 39 39 30 38 38 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 38 30 37 33 38 36 34 34 35 35 32 36 35 36 22 2c 22 49 6d 70 49 44 22 3a 22 33 32 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836280738481499088","Duid":"1704065783133633243","RtbBidReqID":"7836280738644552656","ImpID":"32","CryptaIDv2":"0"},"Var
2023-12-31 23:37:21 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:21 GMT Expires: Sun, 31 Dec 2023 23:37:21 GMT Last-Modified: Sun, 31 Dec 2023 23:37:21 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50143	77.88.55.60	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:21 UTC	1557	OUT	GET /an/tracking/WYWejI_zOoVX2Lb_0TKG08DVUJw4s8S8Un2D7aGP19DlwZ9MURpISMNAJYDpfqm_xf2N-ixOn1CjBIqjBIsT7MS2n3w7R4-ZqdlQ_F3NGWkkwKEODllWBQ08bwOFkmV1I0zZdyNnAmU8JHmiz20kuJo0ZbD5MgJqd5Amr9F4Sq9wdS71Bc--DdgGv5nLs29aL14EPW8uY1cWmzimNaA9DuX776dIvisoa6JmejFU5GrZNqDkbeMPVDMCZRHy9sl44sh2E7rKUWsO9nAlXilKTRAkr-Z-J0FEEl92WAGAR7G8eCZKYqS0MmnWHGeemgK9Wpv4RefiUdBbH7o1My89R65FyNO5ZAcAxBR5mhQ44zW263j3RieqAfipWNLVQ71GAgs8AK2nvuT1fim1cQm9ib87X5e60Q1GX4b1d-2TO6Q29pJ2J2WtTPsEqJsCsO8Zp7S8V45i3raHmtHJ4BbX2C1yiwMfvx4-sSCEziCr9hTyi8N9ll-DYJJolJ6HHZwNGg7YttaYyRvM1mZWp-e00MIQ4MXYbZdmwhgkOscp05IJExrxCRLidITxCJP7A3_UuQfgw_BVcBOr9M_UU-GaYHFMRsbTrnkT9772UgsFMZI21OZFoX1ItlCwSqRC70ZB9NrZkLAfL5fxU1bXqoKelnm8Gu8ebKfb3lmJb74_tYL-aLldGM6hWioPxeKqGA74_Pd_5dxdIztmunw7-jKB0-TUt0a_nMAIvly0~2?action-id=11 HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yastatic.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:37:22 UTC	1045	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:22 GMT Expires: Sun, 31 Dec 2023 23:37:22 GMT Last-Modified: Sun, 31 Dec 2023 23:37:22 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065842261340-7343137448194583777-balancer-l7leveler-kubr-yp-sas-65-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50142	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:21 UTC	2311	OUT	POST /watch/95527089/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065838_a10d83f4edf0614c944faea501864444c3840b276c9707b4fe73c0c6629468f9&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003717%3Aet%3A1704065838%3Ac%3A1%3Arn%3A1038323903%3Arqn%3A9%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065838&t=gdpr(14)mc(p-1)clc(0-0-0)rqnt(2)lt(34400)aw(1)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%223047981704065837004%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:22 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:22 GMT Expires: Sun, 31-Dec-2023 23:37:22 GMT Last-Modified: Sun, 31-Dec-2023 23:37:22 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50144	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:22 UTC	2476	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065841_13f1386b974cdbfcc4c9501900de99e599f8bc2111b5b501140a9823649ed09a&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003721%3Aet%3A1704065841%3Ac%3A1%3Arn%3A1023762605%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065841%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(113700)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	1144	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:22 GMT Expires: Sun, 31-Dec-2023 23:37:22 GMT Last-Modified: Sun, 31-Dec-2023 23:37:22 GMT Pragma: no-cache Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Mon, 30-Dec-2024 23:37:22 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50145	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:22 UTC	2413	OUT	POST /watch/3797907/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065841_13f1386b974cdbfcc4c9501900de99e599f8bc2111b5b501140a9823649ed09a&browser-info=pa%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003721%3Aet%3A1704065841%3Ac%3A1%3Arn%3A565894207%3Arqn%3A7%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1159%2C65%2C3%2C0%2C%2C2964%2C41%2C6418%2C6418%2C1%2C4217%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Afp%3A4254%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065841&t=mc(p-2-h-1)clc(0-0-0)rqnt(1)lt(113700)aw(1)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22adSessionID%22%3A%223047981704065837004%22%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:22 GMT Expires: Sun, 31-Dec-2023 23:37:22 GMT Last-Modified: Sun, 31-Dec-2023 23:37:22 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50146	5.255.255.77	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	10837	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=1&refresh=1&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=42388144&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.NzIwNTc2MDU0OTk1OTEwMDAKNzIwNTc2MDk2MTE5NTc1NjUKNzIwNTc2MDk0OTE5MDMyNDcKNzIwNTc2MDk1ODY0MjA5NzAKMzA5OTY0ODE4Mw%3D%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A280%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A342%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A5%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B6846640140955%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=
2023-12-31 23:37:23 UTC	1346	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065843444926-2808928430070455491-balancer-l7leveler-kubr-yp-vla-54-BAL-2280 access-control-allow-credentials: true access-control-allow-origin: https://faq-kak.ru cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:23 GMT expires: Sun, 31 Dec 2023 23:37:23 GMT last-modified: Sun, 31 Dec 2023 23:37:23 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:37:23 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: Direct x-xss-protection: 1; mode=block
2023-12-31 23:37:23 UTC	1784	IN	Data Raw: 36 46 31 0d 0a 7b 22 69 6d 70 72 65 73 73 69 6f 6e 44 61 74 61 22 3a 7b 22 63 75 72 72 65 6e 63 79 22 3a 22 52 55 42 22 2c 22 72 65 76 65 6e 75 65 55 53 44 22 3a 22 30 2e 30 30 30 30 38 32 32 33 32 22 2c 22 70 72 65 63 69 73 69 6f 6e 22 3a 22 65 73 74 69 6d 61 74 65 64 22 2c 22 72 65 76 65 6e 75 65 22 3a 22 30 2e 30 30 37 33 37 35 32 37 37 22 7d 2c 22 65 76 65 6e 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 Data Ascii: 6F1{"impressionData":{"currency":"RUB","revenueUSD":"0.000082232","precision":"estimated","revenue":"0.007375277"},"eventConfirmationData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"78362
2023-12-31 23:37:23 UTC	5579	IN	Data Raw: 31 35 43 33 0d 0a 25 37 42 55 55 49 44 25 37 44 22 2c 22 68 74 74 70 73 3a 2f 2f 65 79 65 2e 74 61 72 67 65 74 61 64 73 2e 69 6f 2f 73 79 6e 63 2f 79 61 6e 64 65 78 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 6b 69 6d 62 65 72 6c 69 74 65 2e 69 6f 2f 72 74 62 2f 73 79 6e 63 2f 79 61 6e 64 65 78 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 6e 65 77 2d 70 72 6f 67 72 61 6d 6d 61 74 69 63 2e 63 6f 6d 2f 75 73 65 72 62 69 6e 64 3f 73 72 63 3d 79 61 6e 64 65 78 26 70 62 66 3d 31 26 67 69 3d 31 22 2c 22 68 74 74 70 73 3a 2f 2f 6d 69 74 64 6d 70 2e 77 68 69 74 65 62 6f 78 64 69 67 69 74 61 6c 2e 72 75 2f 70 69 78 65 6c 3f 69 64 3d 61 26 73 6f 75 72 63 65 3d 79 61 6e 64 65 78 26 72 65 64 69 72 65 63 74 3d 66 61 6c 73 65 26 68 72 65 66 3d 68 74 74 70 73 25 33 41 25 Data Ascii: 15C3%7BUUID%7D","https://eye.targetads.io/sync/yandex/","https://kimberlite.io/rtb/sync/yandex","https://match.new-programmatic.com/userbind?src=yandex&pbf=1&gi=1","https://mitdmp.whiteboxdigital.ru/pixel?id=a&source=yandex&redirect=false&href=https%3A%
2023-12-31 23:37:23 UTC	2604	IN	Data Raw: 41 32 35 0d 0a 66 63 70 45 31 44 67 62 73 39 44 4a 41 67 73 38 63 51 59 6e 78 53 32 57 75 6d 5a 32 61 5a 43 59 64 76 37 35 44 6f 4f 77 4d 6d 69 2d 6b 63 6e 62 71 54 42 67 4f 67 4d 62 69 73 46 67 72 51 43 30 78 54 49 42 67 57 33 6a 72 38 6a 37 30 54 67 66 72 72 47 31 4d 5a 6c 41 75 76 70 59 71 64 69 77 57 47 32 73 67 48 55 46 64 41 79 39 41 70 36 45 47 59 4f 61 53 49 32 64 45 77 49 63 57 75 63 71 49 45 61 76 64 4d 35 61 5a 79 31 70 47 64 67 54 6d 53 35 77 6c 68 32 6b 69 32 58 38 37 68 72 6d 44 7a 75 41 70 6b 68 6b 63 69 49 31 51 51 72 6b 54 67 2d 52 53 61 73 4f 78 37 6f 2d 4f 52 42 6e 45 68 33 58 45 73 34 33 72 73 52 61 34 63 64 69 45 65 6c 70 65 54 4d 6d 44 79 5f 59 56 36 57 72 52 45 63 69 68 6b 69 72 2d 57 4f 63 4a 4b 5f 79 35 66 54 69 57 4b 42 33 64 4e Data Ascii: A25fcpE1Dgbs9DJAgs8cQYnxS2WumZ2aZCYdv75DoOwMmi-kcnbqTBgOgMbisFgrQC0xTIBgW3jr8j70TgfrrG1MZlAuvpYqdiwWG2sgHUFdAy9Ap6EGYOaSI2dEwIcWucqIEavdM5aZy1pGdgTmS5wlh2ki2X87hrmDzuApkhkciI1QQrkTg-RSasOx7o-ORBnEh3XEs43rsRa4cdiEelpeTMmDy_YV6WrREcihkir-WOcJK_y5fTiWKB3dN
2023-12-31 23:37:23 UTC	5571	IN	Data Raw: 31 35 42 42 0d 0a 61 74 74 65 72 2e 72 75 2f 77 6f 72 6b 73 2f 64 65 6b 6f 72 2f 68 61 6e 75 6b 69 79 61 2d 69 7a 2d 73 65 72 69 69 2d 73 68 61 72 69 6b 6f 6e 6f 73 69 3f 79 63 6c 69 64 3d 31 31 33 39 32 36 37 33 33 38 33 33 35 30 35 33 34 31 34 33 22 2c 22 74 69 74 6c 65 22 3a 22 d0 a1 d1 82 d0 b0 d1 82 d1 83 d1 8d d1 82 d0 ba d0 b0 2e 20 d0 a5 d0 b0 d0 bd d1 83 d0 ba d0 b8 d1 8f 20 d0 b8 d0 b7 20 d1 81 d0 b5 d1 80 d0 b8 d0 b8 20 c2 ab d0 a8 d0 b0 d1 80 d0 b8 d0 ba d0 be d0 bd d0 be d1 81 d1 8b c2 bb 20 d1 80 d0 be d0 b7 d0 be d0 b2 d0 b0 d1 8f 22 2c 22 77 61 72 6e 69 6e 67 22 3a 22 22 2c 22 70 75 6e 79 44 6f 6d 61 69 6e 22 3a 22 6d 61 6e 6e 65 72 2d 6d 61 74 74 65 72 2e 72 75 22 2c 22 66 61 76 69 63 6f 6e 57 69 64 74 68 22 3a 22 31 38 30 22 2c 22 66 61 Data Ascii: 15BBatter.ru/works/dekor/hanukiya-iz-serii-sharikonosi?yclid=11392673383350534143","title":". ","warning":"","punyDomain":"manner-matter.ru","faviconWidth":"180","fa
2023-12-31 23:37:24 UTC	2612	IN	Data Raw: 41 32 44 0d 0a 65 71 30 57 7a 73 54 43 50 36 54 4a 77 43 55 74 31 31 6b 6e 44 45 61 42 77 68 6d 58 68 4e 34 67 6d 64 61 6c 68 6b 66 76 62 5a 4b 69 39 72 6b 5f 43 38 73 33 4f 68 49 6f 4c 46 71 41 6c 7a 4d 70 59 44 73 2d 57 70 79 66 75 74 4a 56 48 34 71 44 6b 35 49 66 77 37 76 54 42 2d 69 50 6f 66 4c 41 66 6a 46 52 6d 53 6a 6a 55 72 74 4b 43 70 30 45 4b 6c 75 67 38 34 67 54 32 33 63 38 4f 32 32 68 79 4d 38 6a 58 76 33 4c 54 57 67 56 35 70 32 32 55 75 43 70 67 42 61 36 6b 58 54 36 44 6b 49 6d 51 50 65 77 4c 31 6f 48 58 32 71 79 32 34 45 58 37 61 6b 6b 43 34 53 47 6e 66 65 33 59 43 6b 4b 69 6b 4f 58 54 31 5f 59 4d 48 35 79 65 78 32 76 2d 7a 73 69 32 71 47 62 61 54 5f 5f 46 64 43 55 33 58 4b 4b 30 71 65 69 7a 4b 77 63 43 5a 71 75 43 65 5f 4b 4b 53 48 2d 41 32 Data Ascii: A2Deq0WzsTCP6TJwCUt11knDEaBwhmXhN4gmdalhkfvbZKi9rk_C8s3OhIoLFqAlzMpYDs-WpyfutJVH4qDk5Ifw7vTB-iPofLAfjFRmSjjUrtKCp0EKlug84gT23c8O22hyM8jXv3LTWgV5p22UuCpgBa6kXT6DkImQPewL1oHX2qy24EX7akkC4SGnfe3YCkKikOXT1_YMH5yex2v-zsi2qGbaT__FdCU3XKK0qeizKwcCZquCe_KKSH-A2
2023-12-31 23:37:24 UTC	5563	IN	Data Raw: 31 35 42 33 0d 0a 34 30 22 2c 22 62 61 6e 6e 65 72 57 69 64 74 68 22 3a 30 2c 22 62 61 6e 6e 65 72 48 65 69 67 68 74 22 3a 30 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 22 43 30 22 2c 22 63 6c 6f 73 65 43 6f 75 6e 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 6e 2f 63 6f 75 6e 74 2f 35 34 32 2f 37 36 39 34 38 35 39 33 39 31 30 31 34 33 35 38 30 37 34 22 2c 22 62 69 64 72 65 71 69 64 22 3a 22 37 38 33 36 32 38 31 39 38 31 39 32 37 34 38 34 33 36 38 22 2c 22 69 6d 70 49 64 22 3a 22 31 22 2c 22 63 61 6d 70 61 69 67 6e 69 64 22 3a 22 31 39 38 37 33 35 36 32 34 22 2c 22 64 69 72 65 63 74 54 69 74 6c 65 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 69 72 65 63 74 2e 79 61 6e 64 65 78 2e 72 75 2f 3f 70 61 72 74 6e 65 72 22 Data Ascii: 15B340","bannerWidth":0,"bannerHeight":0,"creativeId":"C0","closeCounter":"https://yandex.ru/an/count/542/7694859391014358074","bidreqid":"7836281981927484368","impId":"1","campaignid":"198735624","directTitle":{"url":"https://direct.yandex.ru/?partner"
2023-12-31 23:37:24 UTC	2620	IN	Data Raw: 41 33 35 0d 0a 61 63 63 4d 2d 4d 45 4d 63 4b 6a 6c 53 78 62 70 75 44 4c 72 4e 53 56 49 76 58 6a 35 54 5a 4a 49 5a 4a 38 71 73 36 4f 6a 33 52 41 6e 6f 76 6b 4e 55 42 78 69 73 77 5a 47 32 33 74 50 71 6e 61 50 72 46 65 6e 78 53 34 36 78 34 71 77 47 6c 67 6c 32 36 6a 53 49 68 32 55 49 2d 6b 77 64 63 4d 44 49 6d 64 4d 78 7a 2d 6b 78 32 77 41 34 46 30 4c 39 77 5f 72 52 45 38 74 52 77 33 46 6f 64 5a 54 44 7a 34 4a 47 73 75 4c 41 64 65 56 62 71 6c 77 6e 64 41 62 4b 67 63 71 7a 6c 31 6f 73 72 78 4e 54 47 6e 43 67 56 38 5f 53 54 62 59 35 64 38 47 6d 71 30 65 5f 36 55 42 4f 4f 31 76 32 70 67 4e 66 6e 4e 42 6b 67 6b 4e 51 78 37 66 6e 64 57 62 33 4a 43 33 6f 5f 44 41 73 33 77 4b 57 32 56 71 49 2d 57 77 73 6d 48 6e 65 32 62 4d 53 51 4b 49 33 35 74 34 49 57 41 2d 4f 44 Data Ascii: A35accM-MEMcKjlSxbpuDLrNSVIvXj5TZJIZJ8qs6Oj3RAnovkNUBxiswZG23tPqnaPrFenxS46x4qwGlgl26jSIh2UI-kwdcMDImdMxz-kx2wA4F0L9w_rRE8tRw3FodZTDz4JGsuLAdeVbqlwndAbKgcqzl1osrxNTGnCgV8_STbY5d8Gmq0e_6UBOO1v2pgNfnNBkgkNQx7fndWb3JC3o_DAs3wKW2VqI-WwsmHne2bMSQKI35t4IWA-OD
2023-12-31 23:37:24 UTC	5555	IN	Data Raw: 31 35 41 42 0d 0a 22 33 37 39 37 39 30 37 22 2c 22 6d 69 6e 44 69 73 70 6c 61 79 4e 65 77 4d 61 72 6b 65 74 52 61 74 69 6e 67 22 3a 22 34 30 22 2c 22 62 61 6e 6e 65 72 57 69 64 74 68 22 3a 30 2c 22 62 61 6e 6e 65 72 48 65 69 67 68 74 22 3a 30 2c 22 63 72 65 61 74 69 76 65 49 64 22 3a 22 43 30 22 2c 22 63 6c 6f 73 65 43 6f 75 6e 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 6e 2f 63 6f 75 6e 74 2f 35 34 32 2f 37 36 39 34 38 35 39 33 39 31 30 31 34 33 35 38 30 37 34 22 2c 22 62 69 64 72 65 71 69 64 22 3a 22 37 38 33 36 32 38 31 39 38 31 39 32 37 34 38 34 33 36 38 22 2c 22 69 6d 70 49 64 22 3a 22 31 22 2c 22 63 61 6d 70 61 69 67 6e 69 64 22 3a 22 31 39 38 37 33 35 36 32 34 22 2c 22 64 69 72 65 63 74 54 69 74 6c 65 22 3a 7b 22 75 Data Ascii: 15AB"3797907","minDisplayNewMarketRating":"40","bannerWidth":0,"bannerHeight":0,"creativeId":"C0","closeCounter":"https://yandex.ru/an/count/542/7694859391014358074","bidreqid":"7836281981927484368","impId":"1","campaignid":"198735624","directTitle":{"u
2023-12-31 23:37:24 UTC	2628	IN	Data Raw: 41 33 44 0d 0a 41 46 6e 6b 59 73 37 61 44 4c 73 4f 66 79 4e 43 55 39 78 57 70 45 65 6b 52 51 76 35 72 38 73 76 4d 31 66 63 46 66 4f 37 42 73 37 42 4b 47 39 65 77 34 55 65 77 71 6d 4b 6e 33 36 63 57 45 38 6f 76 4f 6f 77 59 31 71 41 2d 46 50 35 74 7a 77 70 37 5f 6b 68 34 77 68 69 5f 69 55 5f 50 70 72 75 51 6c 2d 32 4c 6c 6d 30 75 6c 6c 70 55 61 55 76 33 2d 6b 70 41 68 7a 4d 72 56 4b 6b 49 56 54 63 6c 57 53 59 62 72 39 53 47 73 70 42 53 67 4c 7a 4f 4e 41 62 48 79 41 61 6c 72 4f 59 41 69 61 50 7e 32 22 2c 22 74 69 74 6c 65 22 3a 22 22 7d 2c 7b 22 75 72 6c 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 d0 a1 d1 82 d0 b0 d1 82 d1 83 d1 8d d1 82 d0 ba d0 b0 20 d0 a5 d0 b0 d0 bd d1 83 d0 ba d0 b8 d1 8f 20 d0 b8 d0 b7 20 d1 81 d0 b5 d1 80 d0 b8 d0 b8 20 c2 ab d0 a8 d0 Data Ascii: A3DAFnkYs7aDLsOfyNCU9xWpEekRQv5r8svM1fcFfO7Bs7BKG9ew4UewqmKn36cWE8ovOowY1qA-FP5tzwp7_kh4whi_iU_PpruQl-2Llm0ullpUaUv3-kpAhzMrVKkIVTclWSYbr9SGspBSgLzONAbHyAalrOYAiaP~2","title":""},{"url":"","title":"
2023-12-31 23:37:24 UTC	5547	IN	Data Raw: 31 35 41 33 0d 0a 33 35 38 30 37 34 22 2c 22 62 69 64 72 65 71 69 64 22 3a 22 37 38 33 36 32 38 31 39 38 31 39 32 37 34 38 34 33 36 38 22 2c 22 69 6d 70 49 64 22 3a 22 31 22 2c 22 63 61 6d 70 61 69 67 6e 69 64 22 3a 22 31 39 38 37 33 35 36 32 34 22 2c 22 64 69 72 65 63 74 54 69 74 6c 65 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 69 72 65 63 74 2e 79 61 6e 64 65 78 2e 72 75 2f 3f 70 61 72 74 6e 65 72 22 2c 22 74 69 74 6c 65 22 3a 22 d0 a0 d0 b5 d0 ba d0 bb d0 b0 d0 bc d0 b0 22 7d 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 64 69 72 65 63 74 22 2c 22 63 6c 69 65 6e 74 52 65 67 69 6f 6e 22 3a 22 22 2c 22 73 6f 75 72 63 65 44 6f 6d 61 69 6e 22 3a 22 66 61 71 2d 6b 61 6b 2e 72 75 22 2c 22 69 73 41 62 61 6e 64 6f 6e 65 64 43 61 72 74 42 61 6e Data Ascii: 15A3358074","bidreqid":"7836281981927484368","impId":"1","campaignid":"198735624","directTitle":{"url":"https://direct.yandex.ru/?partner","title":""},"productType":"direct","clientRegion":"","sourceDomain":"faq-kak.ru","isAbandonedCartBan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50153	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	2505	OUT	GET /watch/95527089?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&site-info=%7B%22__ym%22%3A%7B%22ymCmsPlugin%22%3A%7B%22cms%22%3A%22wordpress%22%2C%22cmsVersion%22%3A%226.4%22%2C%22pluginVersion%22%3A%221.2.0%22%2C%22ymCmsRip%22%3A%222337370333%22%7D%7D%7D&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A0%3Als%3A275662732621%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065836%3Ac%3A1%3Arn%3A801238757%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1159%2C65%2C3%2C0%2C%2C2964%2C41%2C%2C%2C%2C4217%3Aco%3A0%3Acpf%3A1%3Ans%3A1704065831950%3Afp%3A4254%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065836%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 427 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:23 GMT Expires: Sun, 31-Dec-2023 23:37:23 GMT Last-Modified: Sun, 31-Dec-2023 23:37:23 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	427	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 30 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 31 30 20 31 33 3a 32 37 3a 31 31 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 6a 42 4e 54 48 50 78 4f 4d 49 51 37 68 51 6f 4c 37 76 75 31 77 51 62 30 51 61 78 2f 62 78 37 71 76 50 32 54 4c 49 36 57 6c 6e 70 35 71 46 55 46 55 61 2b 44 59 43 32 63 66 48 72 33 33 38 34 32 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":0,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-10 13:27:11","forms":1,"recp":"1.00000"},"sbp": {"a":"jBNTHPxOMIQ7hQoL7vu1wQb0Qax/bx7qvP2TLI6Wlnp5qFUFUa+DYC2cfHr33842"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50151	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	2493	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065833_71ad6d1aad595bd3d11a412502e87d5dbb0a3290c9dc2bb59aa35d8426772947&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003716%3Aet%3A1704065837%3Ac%3A1%3Arn%3A223604385%3Arqn%3A6%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065837%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(20900)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:23 GMT Expires: Sun, 31-Dec-2023 23:37:23 GMT Last-Modified: Sun, 31-Dec-2023 23:37:23 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50152	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	2509	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065837%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:23 GMT Expires: Sun, 31-Dec-2023 23:37:23 GMT Last-Modified: Sun, 31-Dec-2023 23:37:23 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50150	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	7614	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=32&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=3047981704065837004&target-id=27890696&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.35%2C%22isInIframe%22%3Afalse%2C%22w%22%3A288%2C%22h%22%3A0%2C%22width%22%3A288%2C%22height%22%3A0%2C%22visible%22%3A0%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A912%2C%22top%22%3A1025%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D&grab-orig-len=2232&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKnMrHktu-Bamkw5vMbuKU2B0sQfjmJnHDDwCFmjt_IP_ab-uSpJTSVWqJrLKFyPp6dz0O9MOSSgioiHICzXePI1wlHRFRFFVRVUDVRSy0_UKmlLZKr1FZoBU1VAe4GbhVUUAZO5fW4VzAFPPReUSry0la-gXncCBW-gq68wWngLTy4aho4BsYJ-Uto9oGEW0J4A9fAVGsK-mq_WVH3Ir8Ra-XNVjih2ApdT9sVrmc1zyLWJtT69PAq8nbgLC2_IhroR65XsyIdYV5FNdB75VbB4EdcBFF6wfJEKyjyCljlGBA2fbzNR2Bgb3LoG_UTFVbUbTe3BX6rCCpnAQWvuJCs50M__Yb_EBedhedu4mANrNMv4ogGxvG_GNK7piACC5mBWUF1A_zWwDvJyQ28_n85PxGdHedmgT6f5dq8xY5cMnnIG5ZWo1JrikOVrhxiVwSRbRNrxZGsxVbzxUFktVjeCCNRYPVTDXQcymPIJJ1AHDdf2eSx02yx69khpNZdRYu8JbekzW9d7rhiuUvgxb6rDIMFU8rGSqdFErEbelaXRnZsh_KmjJzkzdgJZVJLpzr298sVjshX2r0FW8WzXEfPk00tCa2YhBQaCWQoWpVaHkJK8dqh1RbGWapIp5SE4jgIPUlfU27Ni494czYQfEurqmh_6s_uP3sS986DvzUtFej97_aEYAjVmogZ2YK2dKomSj_0Qj8K4kzVCAmbwopdL2XL1DHPR6HX6Ehp0kcswcWj633gAlfmppiBoypuSJpNPkHRZ-xFOv3ChbLoKtf9DThmBVMwiXbTg3CjV6ltceSlxicTEziRePMAfJX1WjVKq9Ycp6rk_j7KPSwjDFJNgG4knFn-Vc_HQaEDNstlVY19qML9o-vAwP2a3eA4ZXRLZURQ809ZLylGG9stchRSQtfxJ4_808HoqerYl1xzCN19628ml2lKqd2qdSizoWZ6OiOZwS-0jCaWTOednRVnHHrFSKSktGtn8xlUGf0nJR0LVandbMgsH7Dnfc9e_6n0-5JLC7iIoVTEhE3zGsw3p7OpBkkXyccz2oTpiOa0jDsNrmOFigknY_dkQYvnbjYpY-VtcSBmGrEKAPlIRT6Ws81MeACmAZZcrRH_x4FUBq5CArTItdqcBtB24BblQihXT0P5lK-_M4uXv5lKgqIsjx-p_JvjRX-MkwLcPP1NMpkJ9RMFKc8KxCK_pJPRU8ZLTi_nH7pU3ee2j58_H9jxc8lw0UJ6mqYBnkmC3oX7bkFQw_R-Sh7tvjVn-2Y9t5xwHQfUL-sTHy6ziN9aCH3GznJcT6a69N7wQJeQtgVj9bKQXhX7OwQ0AhsfMjydNS7rOtOORufp2do7fHzMVi2CUC5rWdkSkdhZYeNApCycEhali59LE5W9SpsHNWHLiM-C7ooCknMwGRR89xoqjOYFlrydptjdJ_rmh82mmC-YMfKz0bwx9bW465hZEmZLnRWDgisyhx0_3Njm2v6V8Nz9kuNmNVhjBzc2y11s-GHk-iGDbKMrV1h0A2ypgnV52K-jN8miqSijBAhpX2CrCWEwoRTluLZvWeQsifhlzLGnCrYBJO2Kq-pX3UeKOqGT4SvIBmADdl_xln-yOynZLNmR-ZVwgxo_iYzRgLK-cAbG6nbWZqo50KrOK_s9ys6db9OGJu3bAtTLXUf0vdW5c3PoRy06lD4IIqWLtxYGhZMG247l6w4vN-jiZE4Ili7uiG6kSUCYzz1DxvuCg_ynDJZcMh0BvGKd18vUrO3DuP55pz2Hm9JdC8K6pCvWA_Py4GZav1cTPLKuIRfpeEsG4XwctZBp-PW-4CSXjLieVDllDrhZGt9jK6Zh_gJqkfDL9guL43Hu9C9IP8-0ocx9FxmIMA_m_sV6Wr8lMUxbEPMkn28YRVXGYZE4syI87L2GeNlxYmG2M8bIhgvS94556s6blGHsCpFtuX58YN_jQqtl5JGyAP9s6WDPKH1yVgg6zLxloaUs4hNIIscloOMtS_mctF1YIaogEjOmb8SZLiJSIpeQaGfDDQ4gJtXSFveUm0lAvBlaB_FeqLSOgQ10FBUOhh7E3dQUBTqoluaJtLpdouXxgl9A1LxirIwovZ2hzT6ZY0ncNCZniMxshtiFKyzcVeFeKdVWuK5kBRAtg6JxeichI4HWgXF9hzAOJOSOCDgC00neaRpDgSqOY6Q7MMEHbXygEQH8&uniformat=true&callback=Ya%5B2230187145163%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:37:23 UTC	1298	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065843442863-14186690662949598670-balancer-l7leveler-kubr-yp-vla-131-BAL-2476 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:23 GMT expires: Sun, 31 Dec 2023 23:37:23 GMT last-modified: Sun, 31 Dec 2023 23:37:23 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:37:23 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: MediaCreative x-xss-protection: 1; mode=block
2023-12-31 23:37:23 UTC	6053	IN	Data Raw: 31 37 39 44 0d 0a 7b 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 69 73 53 74 61 66 66 22 3a 22 66 61 6c 73 65 22 2c 22 77 68 79 54 68 69 73 41 64 4c 61 6e 64 69 6e 67 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 72 65 61 73 6f 6e 73 2e 79 61 6e 64 65 78 2d 74 65 61 6d 2e 72 75 2f 3f 68 69 74 6c 6f 67 69 64 3d 37 38 33 36 32 38 31 39 38 32 33 30 36 30 32 30 33 30 34 22 2c 22 73 73 70 49 64 22 3a 22 22 2c 22 70 61 67 65 4c 61 6e 67 22 3a 22 31 22 2c 22 64 65 74 61 69 6c 65 64 44 65 76 69 63 65 54 79 70 65 22 3a 33 33 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 6d 65 64 69 61 2d 63 72 65 61 74 69 76 65 22 2c 22 Data Ascii: 179D{"common":{"pageId":"3797907","deviceType":"6","sspBidId":"","isStaff":"false","whyThisAdLandingLink":"https://adreasons.yandex-team.ru/?hitlogid=7836281982306020304","sspId":"","pageLang":"1","detailedDeviceType":33,"productType":"media-creative","
2023-12-31 23:37:23 UTC	1357	IN	Data Raw: 35 34 36 0d 0a 39 37 30 22 7d 5d 2c 22 54 49 4d 45 4f 55 54 5f 50 52 45 52 4f 4c 4c 5f 4d 55 4c 54 49 52 4f 4c 4c 5f 56 50 41 49 44 5f 54 49 4d 45 4f 55 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 31 30 30 30 30 22 2c 22 74 65 73 74 49 64 22 3a 22 37 39 33 39 37 30 22 7d 5d 2c 22 54 49 4d 45 4f 55 54 5f 50 52 45 52 4f 4c 4c 5f 4d 55 4c 54 49 52 4f 4c 4c 5f 42 55 46 46 45 52 5f 46 55 4c 4c 5f 54 49 4d 45 4f 55 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 31 30 30 30 30 22 2c 22 74 65 73 74 49 64 22 3a 22 37 39 33 39 37 30 22 7d 5d 2c 22 54 49 4d 45 4f 55 54 5f 4e 4f 4e 5f 50 52 45 52 4f 4c 4c 5f 4d 55 4c 54 49 52 4f 4c 4c 5f 56 50 41 49 44 5f 54 49 4d 45 4f 55 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 31 30 30 30 30 22 2c 22 74 65 73 74 49 64 22 3a 22 37 39 33 Data Ascii: 546970"}],"TIMEOUT_PREROLL_MULTIROLL_VPAID_TIMEOUT":[{"value":"10000","testId":"793970"}],"TIMEOUT_PREROLL_MULTIROLL_BUFFER_FULL_TIMEOUT":[{"value":"10000","testId":"793970"}],"TIMEOUT_NON_PREROLL_MULTIROLL_VPAID_TIMEOUT":[{"value":"10000","testId":"793
2023-12-31 23:37:23 UTC	6826	IN	Data Raw: 31 41 41 32 0d 0a 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 52 45 53 54 41 52 54 5f 4d 55 54 45 44 5f 4f 4e 5f 45 52 52 4f 52 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 35 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 32 31 30 36 22 7d 5d 2c 22 53 45 4e 44 5f 44 49 53 41 42 4c 45 44 5f 41 44 5f 54 59 50 45 5f 49 4e 5f 50 4f 57 45 52 45 46 46 49 43 49 45 4e 43 59 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 65 78 70 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 38 30 37 34 22 7d 5d 2c 22 56 41 53 5f 41 44 44 5f 45 4e 41 42 4c 45 5f 50 41 47 45 5f 4f 50 54 49 4f 4e 53 5f 50 41 52 41 4d 5f 54 4f 5f 56 4d 41 50 5f 4c 49 4e 4b 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 Data Ascii: 1AA2"value":"TRUE","testId":"878444"}],"VAS_RESTART_MUTED_ON_ERROR":[{"value":"5","testId":"892106"}],"SEND_DISABLED_AD_TYPE_IN_POWEREFFICIENCY":[{"value":"exp","testId":"898074"}],"VAS_ADD_ENABLE_PAGE_OPTIONS_PARAM_TO_VMAP_LINK":[{"value":"TRUE","testI
2023-12-31 23:37:23 UTC	1349	IN	Data Raw: 35 33 45 0d 0a 6d 31 64 4c 74 51 52 6d 34 6f 54 78 74 35 42 46 79 74 52 68 34 66 6d 43 30 7e 32 22 2c 22 62 75 74 74 6f 6e 43 6c 69 63 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 79 61 6e 64 65 78 2e 72 75 2f 61 6e 2f 63 6f 75 6e 74 2f 57 67 38 65 6a 49 5f 7a 4f 6f 56 58 32 4c 61 78 30 77 4b 4b 30 43 44 5a 58 6f 4f 51 62 4b 67 62 4b 67 61 34 6d 47 48 7a 46 66 53 78 55 78 52 56 6b 56 45 36 45 72 2d 5f 75 5f 4d 36 45 72 6d 51 4c 31 67 72 32 44 47 68 7a 43 76 31 73 32 58 30 7a 45 30 76 32 31 69 35 32 36 54 46 42 6c 4b 31 75 4e 4a 63 71 31 45 74 79 6d 53 77 6e 51 4e 4a 67 32 72 7a 49 6b 79 53 4b 6b 53 54 56 4a 78 6e 66 6d 73 35 76 62 45 65 7a 45 63 43 76 64 5a 71 6c 6c 46 78 41 53 72 48 35 4b 41 6f 37 58 61 50 31 50 35 4f 47 58 67 48 4c 38 48 4b 71 6f 33 41 73 57 35 Data Ascii: 53Em1dLtQRm4oTxt5BFytRh4fmC0~2","buttonClick":"https://yandex.ru/an/count/Wg8ejI_zOoVX2Lax0wKK0CDZXoOQbKgbKga4mGHzFfSxUxRVkVE6Er-_u_M6ErmQL1gr2DGhzCv1s2X0zE0v21i526TFBlK1uNJcq1EtymSwnQNJg2rzIkySKkSTVJxnfms5vbEezEcCvdZqllFxASrH5KAo7XaP1P5OGXgHL8HKqo3AsW5
2023-12-31 23:37:24 UTC	6834	IN	Data Raw: 31 41 41 41 0d 0a 59 57 43 43 57 4b 2d 51 30 4a 39 52 4d 54 4c 73 46 34 54 43 6d 75 59 34 6d 58 59 6e 39 54 67 6f 38 4f 52 65 66 59 44 6d 6d 31 36 32 2d 73 54 42 4b 34 75 31 67 53 67 54 74 78 2d 5a 42 4e 65 70 44 34 53 67 46 54 78 59 67 73 69 33 79 7a 79 58 39 34 59 53 65 6c 77 4c 72 4e 4d 7a 71 61 69 47 39 6f 63 6b 4e 49 5f 68 36 53 67 4c 49 67 52 4a 73 79 37 42 52 56 67 64 79 31 4e 32 48 61 63 38 66 6d 4f 63 44 32 46 6f 70 37 65 30 34 46 34 5f 48 50 75 53 6d 31 64 4c 74 51 52 6d 34 6f 54 78 74 35 42 46 79 74 52 68 34 66 6d 43 30 7e 32 22 2c 22 70 75 6e 79 44 6f 6d 61 69 6e 22 3a 22 6d 6b 2d 72 6e 73 2e 72 75 22 2c 22 70 6f 73 74 65 72 53 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 61 76 61 74 61 72 73 2e 6d 64 73 2e 79 61 6e 64 65 78 2e 6e 65 74 2f 67 65 74 Data Ascii: 1AAAYWCCWK-Q0J9RMTLsF4TCmuY4mXYn9Tgo8ORefYDmm162-sTBK4u1gSgTtx-ZBNepD4SgFTxYgsi3yzyX94YSelwLrNMzqaiG9ockNI_h6SgLIgRJsy7BRVgdy1N2Hac8fmOcD2Fop7e04F4_HPuSm1dLtQRm4oTxt5BFytRh4fmC0~2","punyDomain":"mk-rns.ru","posterSrc":"https://avatars.mds.yandex.net/get
2023-12-31 23:37:24 UTC	1341	IN	Data Raw: 35 33 36 0d 0a 48 51 55 7a 41 6e 59 71 41 54 77 6b 57 33 35 4c 61 54 73 73 57 42 34 70 76 31 68 42 71 30 34 63 31 4e 73 32 54 75 41 50 32 50 78 47 32 33 45 58 4a 30 36 39 64 4a 51 36 74 42 4a 57 32 46 43 54 30 63 46 38 61 63 4a 37 59 58 59 63 63 75 42 38 33 4b 43 30 76 66 69 6a 4a 4a 74 46 4e 49 39 2d 6c 7a 5a 33 33 6c 52 33 44 49 51 74 56 46 32 35 42 2d 74 5f 4a 6b 5a 59 7a 78 71 4a 6b 6c 58 7a 68 65 6d 76 78 55 79 43 4f 38 4c 79 68 47 34 7a 6e 33 7a 68 47 30 79 6e 71 73 6e 30 62 62 64 63 6d 41 6c 68 6b 65 77 62 70 4e 75 44 5a 71 57 59 74 49 57 30 72 55 48 45 78 70 62 71 72 6a 53 48 51 62 62 76 69 74 56 71 50 49 2d 63 62 67 74 70 50 32 5f 36 76 57 5a 62 6e 78 47 37 78 74 31 4c 6a 4f 37 76 52 71 70 52 63 66 38 74 78 70 72 6f 61 69 47 39 6f 63 7a 66 4e 54 Data Ascii: 536HQUzAnYqATwkW35LaTssWB4pv1hBq04c1Ns2TuAP2PxG23EXJ069dJQ6tBJW2FCT0cF8acJ7YXYccuB83KC0vfijJJtFNI9-lzZ33lR3DIQtVF25B-t_JkZYzxqJklXzhemvxUyCO8LyhG4zn3zhG0ynqsn0bbdcmAlhkewbpNuDZqWYtIW0rUHExpbqrjSHQbbvitVqPI-cbgtpP2_6vWZbnxG7xt1LjO7vRqpRcf8txproaiG9oczfNT
2023-12-31 23:37:24 UTC	6842	IN	Data Raw: 31 41 42 32 0d 0a 67 44 6c 4f 44 42 71 6e 36 7a 6e 6f 48 4f 65 44 44 6f 66 35 75 79 30 6a 58 5a 30 59 66 58 62 38 53 64 57 48 51 55 7a 41 6e 59 71 41 54 77 6b 57 33 35 4c 61 54 73 73 57 42 34 70 76 31 68 42 71 30 34 63 31 4e 73 32 54 75 41 50 32 50 78 47 32 33 45 58 4a 30 36 39 64 4a 51 36 74 42 4a 57 32 46 43 54 30 63 46 38 61 63 4a 37 59 58 59 63 63 75 42 38 33 4b 43 30 76 66 69 6a 4a 4a 74 46 4e 49 39 2d 6c 7a 5a 33 33 6c 52 33 44 49 51 74 56 46 32 35 42 2d 74 5f 4a 6b 5a 59 7a 78 71 4a 6b 6c 58 7a 68 65 6d 76 78 55 79 43 4f 38 4c 79 68 47 34 7a 6e 33 7a 68 47 30 79 6e 71 73 6e 30 62 62 64 63 6d 41 6c 68 6b 65 77 62 70 4e 75 44 5a 71 57 59 74 49 57 30 72 55 48 45 78 70 62 71 72 6a 53 48 51 62 62 76 69 74 56 71 50 49 2d 63 62 67 74 70 50 32 5f 36 76 57 Data Ascii: 1AB2gDlODBqn6znoHOeDDof5uy0jXZ0YfXb8SdWHQUzAnYqATwkW35LaTssWB4pv1hBq04c1Ns2TuAP2PxG23EXJ069dJQ6tBJW2FCT0cF8acJ7YXYccuB83KC0vfijJJtFNI9-lzZ33lR3DIQtVF25B-t_JkZYzxqJklXzhemvxUyCO8LyhG4zn3zhG0ynqsn0bbdcmAlhkewbpNuDZqWYtIW0rUHExpbqrjSHQbbvitVqPI-cbgtpP2_6vW
2023-12-31 23:37:24 UTC	1334	IN	Data Raw: 35 32 46 0d 0a 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 7d 2e 71 66 38 63 34 64 30 31 33 2e 6b 38 36 35 62 39 35 32 65 2c 2e 75 62 66 38 30 37 66 63 32 2e 6b 38 36 35 62 39 35 32 65 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 71 66 38 63 34 64 30 31 33 20 2e 6a 31 32 66 62 63 34 38 36 2c 2e 75 62 66 38 30 37 66 63 32 20 2e 6a 31 32 66 62 63 34 38 36 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 71 66 38 63 34 64 30 31 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 66 32 66 33 32 7d 2e 63 61 35 32 61 63 33 66 66 20 2e 6a 31 32 66 62 63 34 38 36 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 Data Ascii: 52Frder-radius:12px}.qf8c4d013.k865b952e,.ubf807fc2.k865b952e{top:0;left:0;width:100%;height:100%}.qf8c4d013 .j12fbc486,.ubf807fc2 .j12fbc486{display:none}.qf8c4d013{background-color:#2f2f32}.ca52ac3ff .j12fbc486{width:100%;height:100%;-o-object-fit:cov
2023-12-31 23:37:24 UTC	2465	IN	Data Raw: 39 39 41 0d 0a 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 64 31 33 35 39 33 30 63 20 2e 6a 31 32 66 62 63 34 38 36 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 7d 2e 76 64 31 33 35 39 33 30 63 20 2e 74 63 38 38 36 35 32 31 63 7b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 31 35 30 70 78 29 3b 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 Data Ascii: 99Aheight:100%;overflow:hidden}.vd135930c .j12fbc486{-webkit-transform:scaleX(-1);transform:scaleX(-1)}.vd135930c .tc886521c{-webkit-mask:linear-gradient(270deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 150px);mask:linear-gradient(270deg,hsla(0,0%,100%,.6),h
2023-12-31 23:37:24 UTC	4391	IN	Data Raw: 31 31 31 46 0d 0a 63 37 20 30 2c 23 35 30 30 30 35 65 20 31 30 30 25 29 2c 2d 6f 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 31 30 30 25 2c 31 30 30 25 20 31 34 30 25 2c 61 74 20 30 2c 23 35 65 64 35 30 30 20 30 2c 23 32 30 61 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 33 38 2e 37 32 64 65 67 2c 23 65 62 66 66 30 30 2c 23 38 66 30 30 66 66 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 36 34 2e 38 32 64 65 67 2c 23 61 64 30 30 66 66 2c 72 65 64 29 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 36 35 2e 30 33 64 65 67 2c 23 30 66 66 2c 72 65 64 20 39 39 2e 37 39 25 29 2c 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 36 37 2e 30 38 25 20 31 30 30 25 20 61 74 20 35 30 25 2c 61 Data Ascii: 111Fc7 0,#50005e 100%),-o-radial-gradient(100%,100% 140%,at 0,#5ed500 0,#20a 100%);background:linear-gradient(238.72deg,#ebff00,#8f00ff),linear-gradient(64.82deg,#ad00ff,red),linear-gradient(65.03deg,#0ff,red 99.79%),radial-gradient(67.08% 100% at 50%,a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50147	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	2385	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A33219057%3Az%3A60%3Ai%3A20240101003711%3Aet%3A1704065831%3Ac%3A1%3Arn%3A672637573%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065826699%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B%20-%20%D0%A3%20%D0%B2%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%3F%20%D0%A3%20%D0%BD%D0%B0%D1%81%20%D0%B5%D1%81%D1%82%D1%8C%20%D0%BE%D1%82%D0%B2%D0%B5%D1%82!&t=mc(p-1)clc(0-0-0)aw(1)rcm(0)ecs(0)gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:23 GMT Expires: Sun, 31-Dec-2023 23:37:23 GMT Last-Modified: Sun, 31-Dec-2023 23:37:23 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50148	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	2517	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065828_af502536eb2ee0dc9d8d93dbcea4b1560397440b286b3da3055860e983810279&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003708%3Aet%3A1704065828%3Ac%3A1%3Arn%3A759883747%3Arqn%3A4%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A2%3Ast%3A1704065838%3At%3A%D0%9A%D0%B0%D0%BA%20%D0%BD%D0%B0%D0%B9%D1%82%D0%B8%20%D1%81%D0%B2%D0%BE%D1%8E%20%D0%B1%D0%B8%D0%B1%D0%BB%D0%B8%D0%BE%D1%82%D0%B5%D0%BA%D1%83%20%D0%B2%20steam%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(71300)aw(0)rcm(0)ecs(0)ti(1)gdpr(14) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:23 GMT Expires: Sun, 31-Dec-2023 23:37:23 GMT Last-Modified: Sun, 31-Dec-2023 23:37:23 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50149	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:23 UTC	2257	OUT	GET /watch/3797907?wmode=7&page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&nohit=1&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003720%3Aet%3A1704065840%3Ac%3A1%3Arn%3A330016578%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065840%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-1)clc(0-0-0)lt(83400)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:23 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 256 Content-Type: application/json; charset=utf-8 Date: Sun, 31 Dec 2023 23:37:23 GMT Expires: Sun, 31-Dec-2023 23:37:23 GMT Last-Modified: Sun, 31-Dec-2023 23:37:23 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2023-12-31 23:37:23 UTC	256	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 37 33 72 67 49 74 59 45 53 36 79 6c 6d 43 6b 72 58 4f 4d 57 37 4d 30 79 55 4d 54 7a 41 68 71 5a 78 51 6f 53 56 52 62 43 44 62 73 61 61 64 72 47 77 6b 49 6a 64 79 47 42 48 7a 54 38 54 34 63 52 22 2c 20 22 62 22 3a 22 52 6a 38 69 63 6d 49 56 70 72 6e 59 6d 79 55 57 44 39 71 6c 76 34 46 2b 4d 48 44 64 2f 65 32 55 7a 32 6c 37 4c 30 50 67 44 33 59 3d 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 30 34 30 36 35 38 34 33 5f 30 64 37 30 31 38 34 64 33 39 38 38 30 36 35 31 36 63 66 66 32 65 38 62 33 32 39 66 33 66 61 36 62 36 66 33 64 31 62 30 63 63 34 31 32 65 65 61 37 34 66 39 34 64 64 62 62 33 33 61 31 61 37 66 22 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d Data Ascii: {"settings":{"sbp": {"a":"73rgItYES6ylmCkrXOMW7M0yUMTzAhqZxQoSVRbCDbsaadrGwkIjdyGBHzT8T4cR", "b":"Rj8icmIVprnYmyUWD9qlv4F+MHDd/e2Uz2l7L0PgD3Y="},"eu":2,"hittoken":"1704065843_0d70184d398806516cff2e8b329f3fa6b6f3d1b0cc412eea74f94ddbb33a1a7f"},"userData":{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50154	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	669	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:25 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:37:25 GMT Expires: Sun, 31 Dec 2023 23:37:25 GMT Last-Modified: Sun, 31 Dec 2023 23:37:25 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:37:25 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50126	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	644	OUT	GET /get-yabs_performance/7349915/picf4e592cdee91c5b36a717d02b21ce7a6/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:25 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:25 GMT Content-Type: image/webp Content-Length: 11316 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 12 Sep 2022 17:21:13 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: d3657c989607dae6 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:37:25 UTC	11316	IN	Data Raw: 52 49 46 46 2c 2c 00 00 57 45 42 50 56 50 38 20 20 2c 00 00 f0 8d 00 9d 01 2a c8 00 85 00 3e 45 1c 88 44 21 06 d7 5e 04 01 11 2c a7 70 f4 05 58 62 fc 80 1a ca 7a 01 38 c0 2d 33 c1 75 b5 61 af 69 e5 53 d1 38 f2 ad bc ed cc c2 ec e7 e9 6f fb 3e ef 6f 33 5f b4 1e b0 5e 9c 3f cc ef ca fa 19 f9 d5 7a d1 ff 9a b0 34 fd 4f 81 3e 62 be 9d fb ff af c7 d0 b8 37 f4 3f e0 ff ed ff 92 f5 0b f9 cf e3 4f e2 ff 89 f3 f7 bc 7f 89 ff ec fa 82 fb 63 cd 23 e9 fb 0d b5 5f f1 3f b5 5e c0 5e e2 fd d7 f6 3b c5 93 fd 5f f3 1e a1 7e 7f fd ef fe c7 f9 0f 80 1f e7 bf d9 ff e8 7a 67 fe 7b c0 df eb bf e4 7f 6a be 00 bf a3 7f 77 ff af fe 6b fc c7 ec 37 d3 1f f6 9f fe 3f db ff b4 f4 89 f5 3f ff 2f f5 bf 01 3f d1 7f c4 fa 73 ff ff ff ed f0 2b f7 93 ff 77 bb 97 ed f7 ff 76 b9 db 88 52 b2 Data Ascii: RIFF,,WEBPVP8 ,*>ED!^,pXbz8-3uaiS8o>o3_^?z4O>b7?Oc#_?^^;_~zg{jwk7??/?s+wvR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50155	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	1401	OUT	GET /an/tracking/WYWejI_zOoVX2Lb_0TKG08DVUJw4s8S8Un2D7aGP19DlwZ9MURpISMNAJYDpfqm_xf2N-ixOn1CjBIqjBIsT7MS2n3w7R4-ZqdlQ_F3NGWkkwKEODllWBQ08bwOFkmV1I0zZdyNnAmU8JHmiz20kuJo0ZbD5MgJqd5Amr9F4Sq9wdS71Bc--DdgGv5nLs29aL14EPW8uY1cWmzimNaA9DuX776dIvisoa6JmejFU5GrZNqDkbeMPVDMCZRHy9sl44sh2E7rKUWsO9nAlXilKTRAkr-Z-J0FEEl92WAGAR7G8eCZKYqS0MmnWHGeemgK9Wpv4RefiUdBbH7o1My89R65FyNO5ZAcAxBR5mhQ44zW263j3RieqAfipWNLVQ71GAgs8AK2nvuT1fim1cQm9ib87X5e60Q1GX4b1d-2TO6Q29pJ2J2WtTPsEqJsCsO8Zp7S8V45i3raHmtHJ4BbX2C1yiwMfvx4-sSCEziCr9hTyi8N9ll-DYJJolJ6HHZwNGg7YttaYyRvM1mZWp-e00MIQ4MXYbZdmwhgkOscp05IJExrxCRLidITxCJP7A3_UuQfgw_BVcBOr9M_UU-GaYHFMRsbTrnkT9772UgsFMZI21OZFoX1ItlCwSqRC70ZB9NrZkLAfL5fxU1bXqoKelnm8Gu8ebKfb3lmJb74_tYL-aLldGM6hWioPxeKqGA74_Pd_5dxdIztmunw7-jKB0-TUt0a_nMAIvly0~2?action-id=11 HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:37:25 UTC	1046	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:25 GMT Expires: Sun, 31 Dec 2023 23:37:25 GMT Last-Modified: Sun, 31 Dec 2023 23:37:25 GMT NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Yandex-Req-Id: 1704065845679839-14091920400162627840-balancer-l7leveler-kubr-yp-vla-18-BAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50156	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	2358	OUT	GET /watch/3797907?page-url=https%3A%2F%2Ffaq-kak.ru%2Fo-sayte%2F&charset=utf-8&cnt-class=1&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1704065841_13f1386b974cdbfcc4c9501900de99e599f8bc2111b5b501140a9823649ed09a&browser-info=pv%3A1%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A2%3Adp%3A1%3Als%3A1275477354099%3Ahid%3A808629152%3Az%3A60%3Ai%3A20240101003721%3Aet%3A1704065841%3Ac%3A1%3Arn%3A1023762605%3Arqn%3A8%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065831950%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065841%3At%3A%D0%9E%20%D1%81%D0%B0%D0%B9%D1%82%D0%B5%20-%20%D0%A1%D0%B0%D0%B9%D1%82%2C%20%D0%B3%D0%B4%D0%B5%20%D0%B2%D1%8B%20%D1%81%D0%BC%D0%BE%D0%B6%D0%B5%D1%82%D0%B5%20%D1%80%D0%B5%D1%88%D0%B8%D1%82%D1%8C%20%D1%81%D0%B2%D0%BE%D0%B8%20%D0%B2%D0%BE%D0%BF%D1%80%D0%BE%D1%81%D1%8B&t=mc(p-2-h-1)clc(0-0-0)rqnt(2)lt(113700)aw(1)rcm(0)ecs(0)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; _yasc=8IRN2chwKnUWqItv1SNXhKCWPhnwU7V5qN/Yi8ue75MTJm+jREYUq6SDczOGq9dsVw==; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:25 UTC	664	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:25 GMT Expires: Sun, 31-Dec-2023 23:37:25 GMT Last-Modified: Sun, 31-Dec-2023 23:37:25 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50157	77.88.21.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	841	OUT	POST /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive Content-Length: 302 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; yabs-vdrf=A0
2023-12-31 23:37:25 UTC	302	OUT	Data Raw: 7b 22 45 76 65 6e 74 73 22 3a 5b 7b 22 43 6f 6d 6d 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 70 6f 72 74 55 49 44 22 3a 22 30 22 2c 22 50 61 67 65 49 44 22 3a 22 33 37 39 37 39 30 37 22 2c 22 55 6e 69 71 49 44 22 3a 22 35 30 30 32 38 35 33 38 34 31 37 30 34 30 36 35 37 38 31 22 2c 22 55 6e 69 71 49 44 53 6f 75 72 63 65 22 3a 22 59 41 4e 44 45 58 5f 55 49 44 22 2c 22 48 69 74 4c 6f 67 49 44 22 3a 22 37 38 33 36 32 38 31 39 38 31 38 31 35 35 34 38 38 38 30 22 2c 22 44 75 69 64 22 3a 22 31 37 30 34 30 36 35 37 38 33 31 33 33 36 33 33 32 34 33 22 2c 22 52 74 62 42 69 64 52 65 71 49 44 22 3a 22 37 38 33 36 32 38 31 39 38 31 39 32 37 34 38 34 33 36 38 22 2c 22 49 6d 70 49 44 22 3a 22 31 22 2c 22 43 72 79 70 74 61 49 44 76 32 22 3a 22 30 22 7d 2c 22 56 61 72 69 Data Ascii: {"Events":[{"CommonData":{"PassportUID":"0","PageID":"3797907","UniqID":"5002853841704065781","UniqIDSource":"YANDEX_UID","HitLogID":"7836281981815548880","Duid":"1704065783133633243","RtbBidReqID":"7836281981927484368","ImpID":"1","CryptaIDv2":"0"},"Vari
2023-12-31 23:37:26 UTC	502	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 0 Date: Sun, 31 Dec 2023 23:37:25 GMT Expires: Sun, 31 Dec 2023 23:37:25 GMT Last-Modified: Sun, 31 Dec 2023 23:37:25 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50158	5.255.255.70	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	10670	OUT	GET /ads/meta/3797907?target-ref=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F&pcode-test-ids=913082%2C0%2C52%3B918121%2C0%2C50%3B909920%2C0%2C60%3B920185%2C0%2C93%3B929673%2C0%2C67%3B917807%2C0%2C14%3B892904%2C0%2C25%3B923613%2C0%2C92%3B925138%2C0%2C83&pcode-flags-map=eJy1Wdty2zgS%2FRc9J1neL3mDSJDCmiS4IGhHSU2hNIk2o11fthxnZjap%2FPt2A6Akyh5onMzmwZFk9WGjL6dPw18Xl2RQw4pfKVKqhixpoyouFOvUknQdFYvX774uft1cf94uXi%2BkGOnixeJh%2B%2BmBfYD3SRKGUbr49tOLA0wveDkWclC8Uz0ZB%2BpESP08Cg1CyQaybKgq%2BNhJJWjJBC0keEL63o0ReFEU7L2AR6p2bCQTvGkArZP4ggp1RWSxoqWSrKWKV9VApRs3DLz0cDpBpVjjqToqr7i4UFQI7o5PGidRmu8R4OnFBQR5zUephobDD%2FaWqiUcuCSC0cENlmZ%2B5GswPAFi9ILqQx6Oe8lKypX9%2FQzO9%2BDfDC8P89Q7g7ccqwpCR9terlXDWnYK%2BmzEy56w8q%2F3sBrh9feidlirf7Gnf4D5Q%2Fl5GvP%2FF4HvzT4Wey3IUjW0q%2BVqZgTNmh2bZV7mpdHejHaaBKQg0CqXbBhJY3gFWYm%2BkVR08Ek5uCkh84PE%2Bw5Q%2FcFAKqoqQVo3delnGHoQAnlmgG8AYcEDJZJpTxACsAeNSsaScVUISiS7PNPqWeQFfrx3f0qS5EBCgyRCIg1VTMCDitXYXaiKsGaGGM8znkVBGhwAiZSY0%2BE5iKELEM4KrFs0jAJ1N7SGaLKu4upqxTSjd5cUHmGKH%2BNz5vSxl2VHvNuVUIRkiSEgJSKxAT4YRYNOX9ElPxfN1IsOLFxTOOM4SN6qy5b0%2B%2BhekmacZzw56ZssicPkMGhoARCFJKZoWtI0bjfSLIqix9baUl0xuVISavE5GFPu2lHCXINgPB5J8cw8D3wv0eYDRFXZkVtiucp1T3Hs9%2FyKClpVrIBkFusZ2Pb3%2F8zhZq1LynLqtJ7UMGJ7yaArTCNgqelwN6y7cJ8xz3M756Zx3lEtT6bmwdS7%2FMp9DzSBRugLXtIfxBiAF4A6uqEhGGbIW086OBnAuRGyJAv2CJoW0JE1gXp%2Bo0jnNA78xPdmQViOihVY8LpSOAeSdpNgHvpZeOjRikGZ9eOyYYUiA4if4XmcmodRFiSzbEuoP1YeZfhscvMwSbxDcqF8sVygpwcI6MwSvukH4dwWZkU804pWIxaDcAUzzn3oG22oZ5tRtmrsWMUgoayDCFSkoG6MLLBiECsJOgSab6UaXrPCZZdADpJo5jQkU0B%2FdNIKQhzcA9Ql7dRwkoNHYLlv279A0uDdRI4VHEExPbTAJ1JSZ2kmaZYnhhGxsirQnl3ZrM3QQxI4ldxu%2B%2BWFFrKmngzJAwb0yZK7UfLIDlBEaSi0JyC0TpskixJTP0dhqwUItZIOF5K7%2Fc6SyA%2BP46cJE8YUgBzhdSDNodUqVo%2Bwh0Dn4T5SUKANZ1hT34vSeFIEpkzkKDqbHhiPkG25EnysV84uSX1%2FmlgNebvWGVWayo7Nvi7%2BuX14%2F0u7uf%2B4u1289mPvxeLm7ufd9XZ4v7ne3X5cvA6%2BzVBjqGFDSC2OjX%2BMdKRAAL1aNqiMGjafzO8WN5vd9av7z%2BDbfze3H7a%2Fw%2Bu%2F7W42H7efZh993NzoTz582d6ar29%2B3T3cmZc3r47efLjd2U8ReY8AH9xvvlzfffnF%2FvrLvfn%2F8%2F3m1e32t0%2BPvvCvzd3NTpv%2B9PQRO0PzLRU1%2FiwZUZLUgzN%2FYRDY4tJtQSH3MC4KPcbchnHoWaoHdVHSigDPmCnYje2SOukpjf3QCme9MOuVF%2Bcn7OC0MB0JopUBd5yBSb14P29I2SI71ZpyWFmRx%2BmdRS6L49wOnFkHH%2FeF5GOxMt3R8EF7aASIoH8HHj7THdB8kZF1a5iFkJ7ChHjZcCg%2B6GBQi5I%2BUYXiJXsZRLkPq8NLHyCP3wcn78OT95F%2BT14GMaxBaQD2x6fOvDzxzUyrGMzkkvS6asxePtZO9ePHURwdtRMKS9ZizjH%2Bpv6cALEf5QagGiBXHNYP9sZtEYaWv2x5Q3HiMoO0SbSGx%2FsOGOlQ8d3ohopyq29WRJRaJhmUAepXkmLltIZWSZL9NKx7qaBEWC%2FPGdnz6pGLR%2BCoPGwx6Lmlr57OjMEMZGcSPgFk1U1PpNv7g%2F3h0qnFljFSfv70d3mOtJIGL3IIf%2BSFyYskzIHpw3hWShlQQD4DtYsQirYfww1N1Ky4xupC9V5A3txKOotTW92CthzLBUhh6aSyLEsCO5SrYZqp06KgoEFVS3BLgDJ3rwa%2Bl%2BVn6ESvcgVKT65JBSWlYPUKXsHxGlpJs4sTIOEzD0sC31bjKDDm2Ibuc4JNFu7Z0rZTbWgOG0hLZKdE97w49o4TM%2B25vAcQIZeghYgCJVCd8NmUeECbUj9jpdwLktycxyhE9FBQGNewQizX%2Bi1z7x5e6lsBob%2BsWQksBXaKvZqtcSzMYvQuTMDOy%2Be%2BgPD1pnoQ9AqKjppt0b2%2FBJ5nyN6qbdbpR%2BJ8I41tWog4X4IahqgBCYBztHYunIAa25teK3z3m5XeipCL8GYDFzU3ThjEh81of9kNcLgQOckHbKM4m5OHFnZaMCKBnm4yjwDi0FYeBmMCma4hkClKXowtLghTUPZhcgPjxYlLlVcwZMS5tRUmpX%2BucxF%2Ff22ktQlrmNy76cQPvTizdxCobUqOhOK28IHHjMWKj01prjp11E38p51eb2PHfgJ%2Fsbo77CSynhPJ5vpa3d3vtrcPm4fd3a16f717%2F%2B%2FNz9fb%2BfND2OWPn2%2F7%2FfGDZgvQ6cMeHWsPexJoCz%2FdEJ0DsdRXvp0Sc0EbKs8VoZ9N08qqVSg%2BKDcKi%2Fxpjx4leF%2BQ9E3RjKAZWkHOUBGsv%2FYu0zgHKoFfYMjQ3%2F1D3RCplx%2FumRBmBRMCJyzrLmz76TvWUo7dmepLA9u9%2BuIQZSeU8Iq5qT5MoekP0rrvVxw4ZxiXtSC9U2uAaeRH05UboZezLwPX%2BPM7o9B76s7IzCW88dSzt7iAQuRzl98%2FXJ%2FcPvm2MGZIHWo8%2FDuBhPDhmIXK1crtHGt5%2BaQXSVnxN4oNemafkWpg49s7GzKsu8LunDgcSyKJ1nzOYwR5koaPdtbDVqxRvwOhBLrt8NLpMIGeA3V8mJPuBUjWMXdyngaaLnP%2BbESObe14xcBaGO3W93gBEM9Iy7Ep%2Fs3HXQ1%2F4DuTJvpK19aPhO7ZZfXIkZL2w5%2B0xYbqyVqPat2YArYnU2WSnWzr99sP8%2F5MM2%2F%2Bh%2B8rVoKGAdUpWVc7XcjAB2%2B2ExxfSpsFYa5iZrs%2BSJjErpE2bquRXFFm9eo5dRAif377H5%2Bpa2E%3D&pcode-active-testids=929673%2C0%2C67&pcode-icookie=EJXImECSnAFpz9iQNHVfzO85HbMG5B8h6RZ9Rr0jth2awjmaRjyaBb%2BzHNNAbP2pRkWer9gP7bc5Yw2KHFsh0UyPV%2Bg%3D&duid=MTcwNDA2NTc4MzEzMzYzMzI0Mw%3D%3D&imp-id=1&refresh=1&enable-flat-highlight=1&charset=utf-8&comboblock-unencoded-vast=1&test-tag=401871499952130&ad-session-id=9673481704065783203&target-id=42388144&tga-with-creatives=1&top-ancestor=https%3A%2F%2Ffaq-kak.ru&top-ancestor-undetermined=0&pcode-version=937691&pcodever=937691&flash-ver=0&skip-token=yabs.NzIwNTc2MDU0OTk1OTEwMDAKNzIwNTc2MDk2MTE5NTc1NjUKNzIwNTc2MDk0OTE5MDMyNDcKNzIwNTc2MDk1ODY0MjA5NzAKMzA5OTY0ODE4Mw%3D%3D&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.3%2C%22isInIframe%22%3Afalse%2C%22w%22%3A781%2C%22h%22%3A0%2C%22width%22%3A781%2C%22height%22%3A280%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A66%2C%22top%22%3A342%2C%22sspInfo%22%3A%7B%22deviceSizeSsp%22%3A%7B%7D%7D%2C%22ad_no%22%3A9%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A5%7D&grab-orig-len=5120&grab=eyJncmFiX3ZlcnNpb24iOjJ9ChKCoIzkuG0YDBasKwc2df--bk0TTrm8eNIknCKVk3jacJDh5L9sE98vchKRb11gu47D3FCDLTcYcmIPcjgYJEcnR3h0ete9ez-AoP4DuWQGNFMVFbm8XSkEje4U93SbXETV1MzUDGiARY-SwhCKqFFSeL6YGqXhGiKPmgUCi8diZxbOAoeBiZDFyZjELEIWNia8zILN4iwAeAsQ9oLNZbExiTKLMJuG5wszfWYB2zDLMwsWi4DFXTAx4Q8cuCxsFkwWd2DOmIgWaAQsDiZCTJCLl2X8wLEWTGxMYkz4KOl6aZRCz_Cz4ws9oEAp9kyJ5QoM13agzBLbMTzHAAqUYFsupev4IhFJFti7uDhLSbJtG4Zto4KSjholXdNSaotJskTkmyZQoBwE6Q1PKBD5hkcv9qh8vsjIputQirwCTj8Inz9XTE9LSwMZakgS2FS2JfQNetPwHbFviTOpgN4TSj0xveWZAtsxXTIv2xLPdxZ8g8ITells2QKxTerQC22pu6wXc_RSy_PJBbbrGJnCN-lNV-xJfSvRkn7pSWFEVN_FdegluwylbZHQS33QfHrQHN9xSQ7HcCmWWHyh1MyeaBlyDNuKVNRRk7sGPQ0tmqUtlNQoxS5ZGrXpGt4CYS0qP6IkdwX0ItchzzsFz3Poh3HP2hkiNqCkZgG3fdueVWlvMW_LsKcRiwrmFve0AheTCCWdr2W22aY4rwml0HVcoS-iL1QeFZUnMehtJ22rgePD9V3HYwJXEb0fUI7-ZZoPlMimtBOdARyraKlEt8sngJg3dvyIfoFyKf2plixcCtOHgDRC_CVjIndpT43SFPhOgnGWoSe1fMHuAcCXwPF2-SVQmHBR0g2S1L37wAdteAA5NG-CwYUqmEBYmuAsfJvSd97wMQwH9CqXzcLDhIcJ2JoQC2tmtCuyD9SMhsuCTZ82mkpVM0g3Mw1H0kVLb3q-JaEYkvQ9ak4DSFw1Ir7g0w2w2L7tt6ZldM3VptltqLZQCz1TkQh8Sq_qRF1iqXQGzhwiueSii4SCVpnvKp-zChDKKUtx2pcdNUq7qjNorJ6zd4LbFOo4E3WfqFlwlhl8Fi8vwLM7zrIII-gyVPLUgPnAnKK-hi-6oaG2c6l_DPvO1NxJOf5uwQTW-1BIpxxmGa5koqim9hf5zSUR5XtEo_McY3H1qJE4EMC0NzQK9GkeNHuE4AAC3xebm-IknXUbMF-8kRwNWkgzlGGaDAAWLApBBK6EdIAgXQEe89GmJUy4ytRl8SAG0IcdY-tBoq83XAAsi2Az9Ka3TTEIFyCiTolAzyyAGca4mzzhfkhh1qu73Dly1-ZOhQxQk5UIBi2qhYu3a0wNcFg48g6C2CzYmKBsxjyzLGz56cqCkRdG7EXmyG3SPBfyzo4EMZ4tvWSZBfwkReBZgN5EASIL4GbPDcLMLChNFugHMLMA6rA2I7Cm4PFjHW-VQ6-Ie9cF9GEkYwJ2gMonKtXaWphQuzImsT5U3K4r_EW6Mz6XhQtxZgHAc5v4ezrnLPDlbJA7A3iYIKcxVjvomKs4I6WwSZdE587qtIlMHCBICtBsU2U1aoktnP9rZsYcpfo8433gtox5G3F3g_wNYQ8NlCeRHwM4OZ3_1w3CiZZ54HiQxI81CnGwPh2j7bf6tfWWBsHEAEc2RwTrQQ17Mvt2FRNRDhefeEW8tRGuzAJpKYkgLLTMAu4rAH4Bx5sIBOjhGhO-LEM9KaRFq5NCaNEPoLvsYe8zPbkvUtcxYMoY1qyICZeFjwl_18DBJJpiIhzaLyU5AzinlysihGgRJ54_r4J1a2WBLfHEqSrEGJnPg_AUDcypr5_tStvfml0_lIOJYBDCXfYQvOVDemYiCDuTcIrEzb9EgAmHhVdgN9cKZK_I5Gc8KNhDsRNXvOmL_sBgFHHmxZEvLLxibjLuR79Acmef_pPD9sBaaHoOs_VQceeK_8rmYbyuDrB0i54cEPi24Q14Sv4mSil1E1aUdFJqVBXZAaz8AQAvf4wRAtqQEGiqvZLAk8LMk1sJd0fw6XHOwq4a7qEJOLKsefPI_PUwPLFbFQqOT-6JUVC4EnKgViKgAVoGUHxHnmnQ0qLOqFGhhWQubz09jKegiv8ArSc07Zi_3GS2Lc5tDVEq9UVbJTRtIX4O2v5ObN_hcGJ_ZXO1eQsr0VtfUZzzlANzZv43jrSu_StqZ_iKgnZp4SY-w-Ka3mA1glVePaHJBMP7XSXiQWRO9F7qDonT3y80E2AB3PYc79sv0Hd72hnD7j8Pt-mgdwnqylJeIayICMjyc79A3s9rGPL3PzOwT4eXbUa-38lyPCODj1ggsq19KF3DP-4PIUMFnexhFXUQTPeas1nqM5pRzgnGecrFWfII475AW8xl0Ep3GCbYNIr_ZYvR4ktJ0n_pM62uHVrafVtMpTNBC-cndDrD6eLGXopyl0o0aNFOJOD95BNmwzZ8USb1rTzuRJ6azIsgrGfU1LAZ7fzFRAR5XX0vqVcNnixXlcytx-BjBmlLH069oU0OwzkLeD3baNNjIr3cuPzz_AGfq1VVDetVjztoZXOo545xhhD3n_07gz1VcrbYYVbDlqmfH4YbiUZ1kpUohr_Dhl8WXPk8IqInE3Z-oU42Z89MiMow_qdZQ3ueQPgi6OynTxjmkoCaNPZcP5zUy6mdv5cmwzUfdhdAyOAjsnxYJWqTdUzGuB8op3qAwZ4BVK40ynsZEj7jPsrq4eY9xtm7gKArdl1mkFggnpLYr1BEpzynMhsPE3AP_DCG4CFFAj5EQCqvG0DoPjfxOcOP-bAyL_5D4wCJ94EpUh7D_YGccX8A3LxxZh7SgA43BL7hZbB-ZVFpmVZFTLSaiJlgGLhMVEoLMl6eeWGfmgXodwn7V57DYof2smCd8a-ndl7-d2676Rtg3zGE9xnhhgar9axflriMHdd1owB5Esbt6tjieQ_aI4vWqXw3hD3370BOcXTgLesTwrnleENOu4hhPVcqJ-UmrwTP7uwjhZUCq2LAmVqs-H6w8B9RI7Wi5zdkbMoN1LsIt3x0ZJjUutGpEmzovmy5IHOllm-RVJjp0AfqeYUxBJ_Xd_yct0FrmIHbaYbgbec9GZ8A4B0RnEcq3Lo4S_AeFXHLwr5kD9QmXE0_TSy5oUj2WqagGeMMQTpQRdUUGGZLrOfjP2qI2xi7FQ6AvhBbTzjp3N7gHa92AxaPdqfwJh9DZdinVHEPrOoQESocc9x4zGVHGPssKvKPldTnTdv0w9RNZgGwTlZdlc8Q69jM18SbGQUftDkHTmP3b88k5B8T1Mj_FK-s64D95BHvK3B1eGciJ3eR1KY-_pMdITzo7DezkqVNx_wcu03UhH8834q87AGfd2PmEPSpXo6Szlu3uOmEQ7m-CV-FPOaylkH1mUWtZ5mpuDJ4YWlM0mpVc4y7xJ2Kq8rKIsICYSkxnht2PwZeLDBOvA_qDwMsk31QFs0o-4_h11c6HJzkJbPvfh0lAHkeh1WZ_GR4HCRQynLJC7jUvt1HBtweWKyZzb-Zhn6rNiypMQBDwQLMU-ajRZ9uvE-3qyqlCEQnDTv_djUXNnRFGnW6M0BILzqi1yF-OVmphF5dfVzKOtsUwp6pNbB4vqeilwTLQnvC9AbYE5J4n7_29PjeN2O7jqonglHRYt_IVLSG-3wLrxu00WBc5snfC_7SY3miQUuDNr-3BP3fmNhG2jYefV3UaCClhYRmiHUnJ6x70XC7VRkNJDJIJ91y-h1-0m1TPzebgmUpdAh9i3zjiGHZDiU1C1CM7B19bzdKNGIo6Rq-lFF0Al7t5MTYWgT8kZqJn8k5StO7C8jNesBiN-sgTamOAbtC9InyON3su4g4jzmnFay3OCX8flDLDQhy3d2M8eypJHl1PZI_8sBd4cjT7h0Z4g16tCu_-b48-yEFZ5k6zVBlyDfpgaTsXAyhVVy6VXDacA_syRvIwUEGaXxu7S_HqlIMUzWsG5DnpJ5nxfYy6nTT69uy72BhLezwyn2YUAjF5ItlZYlApmFIA3QydWUn4qObRyujsufkHubhkjDWOYurzloAq3XxOsRXK9UTqxucWXCUNKmPB39wSR-he-bY98znVZfhr169XLMOu1Xo3atO0OvehoRKQyOg6tkI2Ha6p09TO3iY8OaCX1OGHfmtt_fMCzDaJas_8T-3BXKSR5jhbjO9DVG_8n2dYIQXPAzFQFXnOma1n4fYi0EhtHgptzTZo9pap3PfIef8pmD8b_uFAZUepbog5coPU3VtYeR34-oDYOX5qaFN7bshWJZNaW15U7kiz8xQIAYaZOhqV72w687vyGq59Q1wu_pP2tI_gKF_dIXzzWljzzyzRWapRZ-mqfiOdOVUcu3hd0BiHpKa4IP0vB1WRjTS3CGYaqkiusG6LEfJMsgpu3pb6oj0pMIJ4PjWBC_FAx6eeeA136tj863Aupm6rYPcnnS0OYK0dCY4QQv8cNz8jhI-ST994E2dELzoJ3e0i538h8cpwO1800PU3lzNcVCcUwg7cGWui-Zt4kBBevNbH2HeRY5B1TZ1wO47pECIA1Keb37DSVmQrWuEYkt-CuenEYVhU92H0MLZ10TJahSd9I5_SpmDy1j_NPY1ZjPYNHyRRxDYNcNJaEtOj0K3Bmuq9aYcvVZx6zx31SXX6OYQuAwKEsTPGH9iXW5jFey_pDAZEgauH25ramBWUer12feIp-x7LDeqGtXsXkV3N2xGqFABsB5owkpl9-GE20XyoXIqLZcBR2no6s8cS5xxHSp61PV4UpwsIoKtdR04rdVWOygghohykgYjJSKt3yBPY2vLJrdRJKRUxab9kC-49gXTXdXVmMq_mltqcm3qC5TDMSXiMOVU1TmFo6iVUDT0VzD6VSzTa3_VKbWZ7IINQjDu0cAT3Q4cHP5R_kN_rhyGl_tgESbtsHYKeoRm4DJ3-deDbxU1NAMHsJdFu6VgwCAa20cbgCvNtfR_Wz-qth-HE0PJ2Nr-jH6tSnucy6CxpHCdZKBdp49JLNt_pqOAHK0czRT58pLRyWYuMdi20DPssq3fjt_m1M4euBlCPkmGSCSqTAdkX-iZ8n_w9sz_dROJ4py8&uniformat=true&callback=Ya%5B6846640140955%5D HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==
2023-12-31 23:37:26 UTC	1298	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close Content-Type: application/json NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1704065845943607-15767166841950369440-balancer-l7leveler-kubr-yp-vla-161-BAL-4397 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 date: Sun, 31 Dec 2023 23:37:26 GMT expires: Sun, 31 Dec 2023 23:37:26 GMT last-modified: Sun, 31 Dec 2023 23:37:26 GMT p3p: CP="NOI DEVa TAIa OUR BUS UNI STA" pragma: no-cache set-cookie: yabs-vdrf=A0; domain=yandex.ru/an; path=/; expires=Sun, 07-Jan-2024 23:37:25 GMT; SameSite=None; Secure timing-allow-origin: * uniformat: true uniformat-product-type: MediaCreative x-xss-protection: 1; mode=block
2023-12-31 23:37:26 UTC	6559	IN	Data Raw: 31 39 39 37 0d 0a 7b 22 63 6f 6d 6d 6f 6e 22 3a 7b 22 70 61 67 65 49 64 22 3a 22 33 37 39 37 39 30 37 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 36 22 2c 22 73 73 70 42 69 64 49 64 22 3a 22 22 2c 22 69 73 53 74 61 66 66 22 3a 22 66 61 6c 73 65 22 2c 22 77 68 79 54 68 69 73 41 64 4c 61 6e 64 69 6e 67 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 72 65 61 73 6f 6e 73 2e 79 61 6e 64 65 78 2d 74 65 61 6d 2e 72 75 2f 3f 68 69 74 6c 6f 67 69 64 3d 37 38 33 36 32 38 32 36 33 36 39 32 34 39 33 39 32 31 36 22 2c 22 73 73 70 49 64 22 3a 22 22 2c 22 70 61 67 65 4c 61 6e 67 22 3a 22 31 22 2c 22 64 65 74 61 69 6c 65 64 44 65 76 69 63 65 54 79 70 65 22 3a 33 33 2c 22 70 72 6f 64 75 63 74 54 79 70 65 22 3a 22 6d 65 64 69 61 2d 63 72 65 61 74 69 76 65 22 2c 22 Data Ascii: 1997{"common":{"pageId":"3797907","deviceType":"6","sspBidId":"","isStaff":"false","whyThisAdLandingLink":"https://adreasons.yandex-team.ru/?hitlogid=7836282636924939216","sspId":"","pageLang":"1","detailedDeviceType":33,"productType":"media-creative","
2023-12-31 23:37:26 UTC	851	IN	Data Raw: 33 34 43 0d 0a 22 76 61 6c 75 65 22 3a 22 31 30 30 30 30 22 2c 22 74 65 73 74 49 64 22 3a 22 37 39 33 39 37 30 22 7d 5d 2c 22 54 49 4d 45 4f 55 54 5f 4e 4f 4e 5f 50 52 45 52 4f 4c 4c 5f 4d 55 4c 54 49 52 4f 4c 4c 5f 42 55 46 46 45 52 5f 45 4d 50 54 59 5f 4c 49 4d 49 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 31 30 22 2c 22 74 65 73 74 49 64 22 3a 22 37 39 33 39 37 30 22 7d 5d 2c 22 56 41 53 5f 47 52 41 42 5f 4c 45 4e 47 54 48 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 32 30 34 38 22 2c 22 74 65 73 74 49 64 22 3a 22 38 30 38 30 37 34 22 7d 5d 2c 22 56 41 53 5f 45 4e 41 42 4c 45 5f 54 52 41 43 4b 5f 56 49 53 55 41 4c 5f 53 48 4f 57 5f 46 4f 52 5f 45 58 54 45 52 4e 41 4c 5f 44 53 50 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 Data Ascii: 34C"value":"10000","testId":"793970"}],"TIMEOUT_NON_PREROLL_MULTIROLL_BUFFER_EMPTY_LIMIT":[{"value":"10","testId":"793970"}],"VAS_GRAB_LENGTH":[{"value":"2048","testId":"808074"}],"VAS_ENABLE_TRACK_VISUAL_SHOW_FOR_EXTERNAL_DSP":[{"value":"TRUE","testId"
2023-12-31 23:37:26 UTC	7332	IN	Data Raw: 31 43 39 43 0d 0a 74 49 64 22 3a 22 38 36 35 33 36 32 22 7d 5d 2c 22 56 41 53 5f 45 43 4f 4d 5f 43 54 41 5f 46 4f 52 5f 53 4d 41 4c 4c 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 45 43 4f 4d 5f 43 54 41 5f 53 4d 41 4c 4c 5f 57 49 54 48 5f 54 45 58 54 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 2c 22 74 65 73 74 49 64 22 3a 22 38 37 38 34 34 34 22 7d 5d 2c 22 56 41 53 5f 52 45 53 54 41 52 54 5f 4d 55 54 45 44 5f 4f 4e 5f 45 52 52 4f 52 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 22 35 22 2c 22 74 65 73 74 49 64 22 3a 22 38 39 32 31 30 36 22 7d 5d 2c 22 53 45 4e 44 5f 44 49 53 41 42 4c 45 44 5f 41 44 5f 54 59 50 45 5f 49 4e 5f 50 4f 57 45 52 45 46 46 49 43 49 45 4e 43 Data Ascii: 1C9CtId":"865362"}],"VAS_ECOM_CTA_FOR_SMALL":[{"value":"TRUE","testId":"878444"}],"VAS_ECOM_CTA_SMALL_WITH_TEXT":[{"value":"TRUE","testId":"878444"}],"VAS_RESTART_MUTED_ON_ERROR":[{"value":"5","testId":"892106"}],"SEND_DISABLED_AD_TYPE_IN_POWEREFFICIENC
2023-12-31 23:37:26 UTC	843	IN	Data Raw: 33 34 34 0d 0a 44 72 75 42 67 69 6e 30 4f 62 48 6d 46 6a 79 6d 73 4e 59 50 36 78 75 4a 44 64 31 37 37 36 64 49 66 63 4c 72 35 6b 54 33 67 73 35 6c 64 69 4e 76 71 36 68 4f 36 63 64 76 4a 6a 51 38 63 52 66 45 72 6c 4b 51 56 47 45 4a 66 59 54 2d 59 71 6b 73 47 41 37 58 4a 68 72 75 31 42 33 35 30 35 52 34 42 30 6a 39 31 59 79 77 78 4c 74 31 65 34 74 6e 54 57 4d 43 67 4f 68 69 6a 57 4b 43 6e 69 77 47 34 2d 5a 6f 58 36 50 49 71 39 64 55 32 55 4f 41 4d 6e 43 51 4f 49 51 4b 41 49 32 6e 71 79 51 47 63 6e 4f 53 4f 52 76 33 75 30 32 59 65 32 44 4f 34 53 44 71 4b 6e 32 76 4f 47 5a 30 56 42 45 62 67 55 55 76 74 5f 6c 75 6e 48 76 73 69 31 2d 6b 43 52 64 62 57 6f 7a 79 51 56 5f 4e 6d 6a 4e 73 55 6f 72 53 52 4a 79 4e 6d 76 55 74 6c 70 45 30 35 56 41 72 4b 61 32 63 64 76 Data Ascii: 344DruBgin0ObHmFjymsNYP6xuJDd1776dIfcLr5kT3gs5ldiNvq6hO6cdvJjQ8cRfErlKQVGEJfYT-YqksGA7XJhru1B3505R4B0j91YywxLt1e4tnTWMCgOhijWKCniwG4-ZoX6PIq9dU2UOAMnCQOIQKAI2nqyQGcnOSORv3u02Ye2DO4SDqKn2vOGZ0VBEbgUUvt_lunHvsi1-kCRdbWozyQV_NmjNsUorSRJyNmvUtlpE05VArKa2cdv
2023-12-31 23:37:26 UTC	7340	IN	Data Raw: 31 43 41 34 0d 0a 32 4c 61 33 30 30 71 36 30 42 45 41 41 32 4f 51 62 4b 67 62 4b 67 61 34 6d 4c 4a 32 30 33 66 45 35 4d 63 48 71 64 45 51 35 43 35 4b 6f 64 44 32 55 66 74 31 6d 54 68 65 47 50 39 70 4c 4d 36 42 61 35 35 35 45 39 58 37 37 36 64 49 76 63 6c 38 6f 6b 50 43 65 31 73 44 6e 49 55 62 71 65 66 4f 46 37 48 52 4f 50 30 66 65 73 4d 6f 6a 41 78 68 55 65 6f 4f 58 58 34 46 57 47 45 38 57 65 76 57 48 47 70 4a 4a 4b 37 61 58 59 34 30 79 79 73 4d 66 66 75 30 4c 39 43 78 6c 4e 6a 37 4e 5f 50 59 52 38 76 47 56 68 70 33 4c 54 4e 4d 76 52 7a 37 4a 66 38 75 4f 56 73 4d 72 64 4d 7a 71 4b 61 49 39 77 70 4e 42 66 56 71 5a 55 4c 41 66 4c 39 66 78 55 34 35 51 6c 6b 62 79 64 45 47 4f 50 6a 45 5a 5a 72 6a 32 30 5a 79 69 6e 76 43 47 6c 76 4a 6e 45 6d 47 74 67 37 6b 42 Data Ascii: 1CA42La300q60BEAA2OQbKgbKga4mLJ203fE5McHqdEQ5C5KodD2Uft1mTheGP9pLM6Ba555E9X776dIvcl8okPCe1sDnIUbqefOF7HROP0fesMojAxhUeoOXX4FWGE8WevWHGpJJK7aXY40yysMffu0L9CxlNj7N_PYR8vGVhp3LTNMvRz7Jf8uOVsMrdMzqKaI9wpNBfVqZULAfL9fxU45QlkbydEGOPjEZZrj20ZyinvCGlvJnEmGtg7kB
2023-12-31 23:37:26 UTC	835	IN	Data Raw: 33 33 43 0d 0a 4f 6c 6a 6c 38 55 45 66 71 6f 49 4d 5a 56 6c 33 6c 51 65 54 62 46 58 71 79 30 7e 32 3f 6d 65 64 69 61 2d 74 65 73 74 2d 74 61 67 3d 32 32 35 31 37 39 39 38 31 33 36 38 35 32 35 31 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 64 61 74 61 2d 61 73 73 65 74 2d 63 6c 69 63 6b 3d 5c 22 74 69 74 6c 65 5c 22 20 63 6c 61 73 73 3d 5c 22 61 64 35 38 32 30 34 62 63 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 72 35 32 65 30 63 31 39 65 20 79 31 36 63 30 37 63 66 31 20 62 39 33 62 30 34 62 33 66 5c 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 5c 22 79 66 36 38 36 37 34 32 62 20 66 64 33 34 64 64 61 65 30 5c 22 3e 20 d0 9c d0 b5 d0 b1 d0 b5 d0 bb d1 8c d0 bd d0 b0 d1 8f 20 d1 84 d0 b0 d0 b1 d1 80 d0 b8 d0 ba d0 b0 20 c2 ab d0 a0 d0 b5 Data Ascii: 33COljl8UEfqoIMZVl3lQeTbFXqy0~2?media-test-tag=2251799813685251\" target=\"_blank\" data-asset-click=\"title\" class=\"ad58204bc\"><div class=\"r52e0c19e y16c07cf1 b93b04b3f\"><span class=\"yf686742b fd34ddae0\">
2023-12-31 23:37:26 UTC	7348	IN	Data Raw: 31 43 41 43 0d 0a 62 48 6d 46 6a 79 6d 73 4e 59 50 36 78 75 4a 44 64 31 37 37 36 64 49 66 63 4c 72 35 6b 54 33 67 73 35 6c 64 69 4e 76 71 36 68 4f 36 63 64 76 4a 6a 51 38 63 52 66 45 72 6c 4b 51 56 47 45 4a 66 59 54 2d 59 71 6b 73 47 41 37 58 4a 68 72 75 31 42 33 35 30 35 52 34 42 30 6a 39 31 59 79 77 78 4c 74 31 65 34 74 6e 54 57 4d 43 67 4f 68 69 6a 57 4b 43 6e 69 77 47 34 2d 5a 6f 58 36 50 49 71 39 64 55 32 55 4f 41 4d 6e 43 51 4f 49 51 4b 41 49 32 6e 71 79 51 47 63 6e 4f 53 4f 52 76 33 75 30 32 59 65 32 44 4f 34 53 44 71 4b 6e 32 76 4f 47 5a 30 56 42 45 62 67 55 55 76 74 5f 6c 75 6e 48 76 73 69 31 2d 6b 43 52 64 62 57 6f 7a 79 51 56 5f 4e 6d 6a 4e 73 55 6f 72 53 52 4a 79 4e 6d 76 55 74 6c 70 45 30 35 56 41 72 4b 61 32 63 64 76 4b 32 43 5a 37 44 37 66 Data Ascii: 1CACbHmFjymsNYP6xuJDd1776dIfcLr5kT3gs5ldiNvq6hO6cdvJjQ8cRfErlKQVGEJfYT-YqksGA7XJhru1B3505R4B0j91YywxLt1e4tnTWMCgOhijWKCniwG4-ZoX6PIq9dU2UOAMnCQOIQKAI2nqyQGcnOSORv3u02Ye2DO4SDqKn2vOGZ0VBEbgUUvt_lunHvsi1-kCRdbWozyQV_NmjNsUorSRJyNmvUtlpE05VArKa2cdvK2CZ7D7f
2023-12-31 23:37:26 UTC	827	IN	Data Raw: 33 33 34 0d 0a 32 65 2c 2e 63 39 65 63 34 31 66 30 37 20 2e 6a 31 32 66 62 63 34 38 36 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 63 39 65 63 34 31 66 30 37 20 2e 6a 31 32 66 62 63 34 38 36 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 20 73 63 61 6c 65 58 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 20 73 63 61 6c 65 58 28 2d 31 29 7d 2e 63 39 65 63 34 31 66 30 37 20 2e 74 63 38 38 36 35 32 31 63 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 68 73 Data Ascii: 3342e,.c9ec41f07 .j12fbc486{top:0;left:0;width:100%;overflow:hidden}.c9ec41f07 .j12fbc486{-webkit-transform:rotate(180deg) scaleX(-1);transform:rotate(180deg) scaleX(-1)}.c9ec41f07 .tc886521c{width:100%;height:100%;-webkit-mask:linear-gradient(180deg,hs
2023-12-31 23:37:26 UTC	7356	IN	Data Raw: 31 43 42 34 0d 0a 66 72 6f 6d 28 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 29 2c 63 6f 6c 6f 72 2d 73 74 6f 70 28 39 30 25 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 29 29 3b 6d 61 73 6b 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 29 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 20 39 30 25 29 7d 2e 76 64 31 33 35 39 33 30 63 2e 6b 38 36 35 62 39 35 32 65 2c 2e 76 64 31 33 35 39 33 30 63 20 2e 6a 31 32 66 62 63 34 38 36 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 76 64 31 33 35 39 33 30 63 20 2e 6a 31 32 66 62 63 34 38 36 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: 1CB4from(hsla(0,0%,100%,.6)),color-stop(90%,hsla(0,0%,100%,0)));mask:linear-gradient(180deg,hsla(0,0%,100%,.6),hsla(0,0%,100%,0) 90%)}.vd135930c.k865b952e,.vd135930c .j12fbc486{top:0;right:0;height:100%;overflow:hidden}.vd135930c .j12fbc486{-webkit-tran
2023-12-31 23:37:26 UTC	819	IN	Data Raw: 33 32 43 0d 0a 65 36 20 30 2c 23 65 33 64 37 65 66 20 31 31 25 2c 23 66 34 64 32 65 66 20 32 32 25 2c 23 66 66 64 31 65 61 20 33 33 25 2c 23 66 66 64 31 64 66 20 34 34 25 2c 23 66 66 64 30 63 63 20 35 36 25 2c 23 66 66 64 32 62 33 20 36 37 25 2c 23 66 66 64 62 39 65 20 37 38 25 2c 23 66 66 65 39 38 66 20 38 39 25 2c 23 66 66 66 35 38 35 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 34 35 64 65 67 2c 23 64 35 64 35 65 36 2c 23 65 33 64 37 65 66 20 31 31 25 2c 23 66 34 64 32 65 66 20 32 32 25 2c 23 66 66 64 31 65 61 20 33 33 25 2c 23 66 66 64 31 64 66 20 34 34 25 2c 23 66 66 64 30 63 63 20 35 36 25 2c 23 66 66 64 32 62 33 20 36 37 25 2c 23 66 66 64 62 39 65 20 37 38 25 2c 23 66 66 65 Data Ascii: 32Ce6 0,#e3d7ef 11%,#f4d2ef 22%,#ffd1ea 33%,#ffd1df 44%,#ffd0cc 56%,#ffd2b3 67%,#ffdb9e 78%,#ffe98f 89%,#fff585 100%);background-image:linear-gradient(45deg,#d5d5e6,#e3d7ef 11%,#f4d2ef 22%,#ffd1ea 33%,#ffd1df 44%,#ffd0cc 56%,#ffd2b3 67%,#ffdb9e 78%,#ffe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50160	93.158.134.119	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	2057	OUT	POST /watch/95527089/1?page-url=https%3A%2F%2Ffaq-kak.ru%2Fkak-najti-svoyu-biblioteku-v-steam%2F%23main&charset=utf-8&hittoken=1704065825_9445006332d6ec3fb636577aa211e187677173e3b5522832d31f041aa78299a4&browser-info=nb%3A1%3Acl%3A1595%3Aar%3A1%3Avf%3A6mv6as6uhfnj8xo3ikdxwgrf%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1201%3Acn%3A1%3Adp%3A1%3Als%3A275662732621%3Ahid%3A456489241%3Az%3A60%3Ai%3A20240101003724%3Aet%3A1704065844%3Ac%3A1%3Arn%3A897928026%3Arqn%3A10%3Au%3A1704065783133633243%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C5098%2C5098%2C1%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1704065820463%3Aadb%3A1%3Arqnl%3A1%3Ast%3A1704065844&t=gdpr(14%2C14%2C14%2C14)mc(p-2-h-1)clc(0-0-0)rqnt(3)lt(163600)aw(0)rcm(0)ecs(0)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://faq-kak.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yabs-sid=773563701704065787; sync_cookie_csrf=1120317805fake; yandexuid=5002853841704065781; yuidss=5002853841704065781; i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; sync_cookie_ok=synced; yp=1704152191.yu.5002853841704065781; ymex=1706657791.oyu.5002853841704065781#1735601787.yrts.1704065787#1735601787.yrtsi.1704065787; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2023-12-31 23:37:26 UTC	753	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://faq-kak.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Sun, 31 Dec 2023 23:37:26 GMT Expires: Sun, 31-Dec-2023 23:37:26 GMT Last-Modified: Sun, 31-Dec-2023 23:37:26 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2023-12-31 23:37:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50161	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	643	OUT	GET /get-yabs_performance/405900/pic09bd08e399f3a9b70a18adebb38f6c9b/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:26 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:26 GMT Content-Type: image/webp Content-Length: 3562 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 27 Nov 2023 16:42:25 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 24c5da036912306a NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:37:26 UTC	3562	IN	Data Raw: 52 49 46 46 e2 0d 00 00 57 45 42 50 56 50 38 20 d6 0d 00 00 70 39 00 9d 01 2a 85 00 c8 00 3e 51 26 8f 45 a1 a1 09 87 46 66 0c 02 82 5a 41 c1 09 aa 6a 01 fa 01 fc 03 43 e1 c4 a5 41 d2 8c 12 71 8f e7 3f b1 79 89 fc a3 ef c6 2d 59 0e f1 f3 50 2c 11 ff 01 d9 1d 9c ff 90 f4 02 ef c7 79 ee a0 5e cd fd 67 fe 8f b8 07 f2 5f ea 7e 64 ff 6a f0 30 f9 9f f6 ef d9 df 80 0f e5 bf dc 7f f1 7f 96 f7 49 fe 67 f6 b3 cd 07 e8 7f e3 7f f8 ff a1 f8 07 fe 73 fe 0b d3 3b ff ff b6 2f dc df ff fe ee 5f b5 84 46 11 3b 9b 0f ab 58 c7 23 fe a8 c2 42 3d b4 c7 3d f9 2e dd f3 fa dd dc 74 dc 58 28 48 12 d2 96 b6 16 33 b9 ed 22 fd be f9 8f 96 45 cf a6 6e ca 7e f7 c5 ee d8 c0 71 46 af fd 87 cb 3d 50 5c fd 4a 4f 09 be c5 2b 28 cc 42 0c 19 e3 be 60 94 9f ff ba 19 d1 d2 24 22 91 58 1e 5d d1 Data Ascii: RIFFWEBPVP8 p9*>Q&EFfZAjCAq?y-YP,y^g_~dj0Igs;/_F;X#B==.tX(H3"En~qF=P\JO+(B`$"X]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50159	213.180.204.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	612	OUT	GET /favicon/manner-matter.ru?size=120&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:26 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:26 UTC	3278	IN	Data Raw: 43 43 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0c 8e 49 44 41 54 78 01 ec d1 41 11 00 20 0c 03 b0 41 ff f5 ef 16 7c ec 12 0b 39 6d df ac c5 1d 04 23 18 c1 08 46 30 82 11 2c 18 c1 08 46 30 82 11 8c 60 c1 08 46 30 82 11 8c e0 6d 04 23 18 c1 82 11 8c 60 04 23 18 c1 08 16 8c 60 04 23 18 c1 49 3e 37 67 b0 6a 5e 18 45 f1 45 ff 91 09 25 30 02 41 11 51 f0 02 c6 30 16 19 29 c6 48 90 60 c6 4c 44 ca 1b c8 0b 9d f3 28 e7 fc 5b e3 fb e9 1e be af 7b 6f 67 8d cf f7 6b af bd f7 da c3 03 af d7 0b a7 53 4d 69 0e 87 03 1e 8f 87 5c 65 3c b7 db ad 94 c7 fa e8 d7 f6 03 a6 c9 5a ad 86 fd 7e 8f 6a b5 aa c4 74 2a 95 c2 7a bd 46 a5 52 51 c2 4b 26 93 58 ad 56 ca 78 ac 8f 3c b1 5f 1b 0d 38 1e 8f 63 36 9b e1 7e Data Ascii: CC7PNGIHDRxx9d6IDATxA A\|9m#F0,F0`F0m#`#`#I>7gj^EE%0AQ0)H`LD([{ogkSMi\e<Z~jt*zFRQK&XVx<_8c6~
2023-12-31 23:37:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50162	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:25 UTC	645	OUT	GET /get-yabs_performance/6888053/2a0000018442f6c30046ecd4e432f1af70b7/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:26 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:26 GMT Content-Type: image/webp Content-Length: 4958 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 04 Nov 2022 14:06:18 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 9afdf93d8485863e NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:26 UTC	4958	IN	Data Raw: 52 49 46 46 56 13 00 00 57 45 42 50 56 50 38 20 4a 13 00 00 10 53 00 9d 01 2a a9 00 c8 00 3e 51 26 8f 45 a1 a1 09 3d 76 c2 0c 02 82 59 5b a3 4a 03 38 02 78 32 5c 0d c1 d4 1d fe e7 f1 9b 30 94 fb ae e1 25 63 ef 2a 9f 09 fd 5f d1 27 a4 3f f3 be a0 1f e4 3d 38 fa 3c f3 19 fa ef ea 7d fe 9f f6 cb dd 9f eb 4f fa 6f 70 0f d8 af 58 4f 54 bf e6 1e a1 5f c9 7f b7 7a d3 ff e3 fd b0 f8 83 fe ef ff 3f d2 4f 30 cf c2 8f f0 7f dd 7c 2d f1 9b eb 8c f2 bf a2 f2 55 e6 9f cf 7f a2 f4 0b f9 1f db cf c9 ff 68 f4 8b bf 7f 89 3f dc 7a 81 7b 53 fd ae fe 5d 9e fd 71 f6 02 ee e7 fa df b8 bf 4a 9f ec 7f a2 7a 99 f5 7b fd 47 dc 57 d8 17 f2 9f e9 df e3 7e e1 3e 46 ff 3d ff 23 c8 97 ea 5f e7 ff 61 3e 00 ff 93 ff 54 ff 63 fd df f2 c3 e3 c7 fe ef f2 de 89 fe 91 ff cf fe 8b e0 4f f5 ef Data Ascii: RIFFVWEBPVP8 JS>Q&E=vY[J8x2\0%c_'?=8<}OopXOT_z?O0\|-Uh?z{S]qJz{GW~>F=#_a>TcO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50163	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:26 UTC	414	OUT	GET /get-yabs_performance/7349915/picf4e592cdee91c5b36a717d02b21ce7a6/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:26 UTC	592	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:26 GMT Content-Type: image/jpeg Content-Length: 10741 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 12 Sep 2022 17:21:13 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 47fe5afcca78ebb7 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:26 UTC	10741	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2d 01 2d 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 85 00 c8 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 00 02 03 06 01 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f9 f7 84 07 51 b7 96 25 Data Ascii: JFIF--C!"$"$C"Q%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50164	87.250.250.90	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:26 UTC	669	OUT	GET /event_confirmation HTTP/1.1 Host: an.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=IwNmuqn8KFRKL3OguQy9IIfoeioYlHdNWyXOqYn/XeNe4b7s/aK45Iy31ths8HF7SPCRC45sXh6L03ZFjv7Yfz527+M=; yandexuid=5002853841704065781; yashr=9687945181704065781; yuidss=5002853841704065781; is_gdpr=0; is_gdpr_b=CIvnAxDa4gE=; _yasc=mH81EojOJl06s04XLWNFzBftPasng7m1zXlRsVgNp4Fqa3/TTwk47e6kRH0QD/XdaA==; yabs-vdrf=A0
2023-12-31 23:37:27 UTC	470	IN	HTTP/1.1 400 Bad Request Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 47 Content-Type: text/html; charset=windows-1251 Date: Sun, 31 Dec 2023 23:37:27 GMT Expires: Sun, 31 Dec 2023 23:37:27 GMT Last-Modified: Sun, 31 Dec 2023 23:37:27 GMT P3P: CP="NOI DEVa TAIa OUR BUS UNI STA" Pragma: no-cache Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-XSS-Protection: 1; mode=block
2023-12-31 23:37:27 UTC	47	IN	Data Raw: 3c 21 2d 2d 20 50 61 72 73 65 20 65 76 65 6e 74 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 72 65 63 6f 72 64 20 66 61 69 6c 65 64 20 2d 2d 3e Data Ascii: ... Parse event-confirmation-record failed -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50165	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:26 UTC	644	OUT	GET /get-yabs_performance/5551285/picb27d5ed63233acd4d9256fdcb60995bd/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:27 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:27 GMT Content-Type: image/webp Content-Length: 2026 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 12 Sep 2022 17:19:07 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 43745f1bf99a2c7f NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:27 UTC	2026	IN	Data Raw: 52 49 46 46 e2 07 00 00 57 45 42 50 56 50 38 20 d6 07 00 00 f0 2c 00 9d 01 2a c8 00 c8 00 3e 51 28 91 46 a1 a1 08 5d 26 52 0c 02 82 5a 5b b8 ed 37 f8 05 bf d6 00 c8 0c d0 2f 00 7e 80 48 51 be 01 fe 03 f8 07 e0 06 cb ec d8 40 36 dc 73 f5 59 41 d7 89 e3 43 6c d8 e6 5c 1f d3 df d5 7a f2 ec b7 6b 7f ef df 95 1c 1f 7c cf fa 97 f9 0f b6 ff 99 c9 ac aa 94 66 9f fb fe e3 bd b8 fd 3b ff 93 dc 3f f5 6f fe 57 62 ef 45 4f db e9 f1 bd 0a 8b f5 aa 70 80 79 fe 8a a9 b7 99 af 01 a4 18 48 70 e7 6b 99 af 01 a4 18 48 6b 14 89 7e 80 62 a7 39 a4 19 0d f1 eb c7 ab d4 df 4c dc f7 48 2a a1 8c 7f 0c 15 58 b8 7e 49 b2 a0 fb 99 9c 52 84 31 4c cf 51 73 77 87 19 6e ac ff fe af 8b ff f8 79 6c b1 2c 95 b6 91 6e ec 30 3c 2e a1 d8 58 79 14 c7 96 9e 5a f3 5e 05 a2 33 42 93 f2 9b 7f 05 32 Data Ascii: RIFFWEBPVP8 ,>Q(F]&RZ[7/~HQ@6sYACl\zk\|f;?oWbEOpyHpkHk~b9LHX~IR1LQswnyl,n0<.XyZ^3B2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50167	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:26 UTC	644	OUT	GET /get-yabs_performance/7706666/pic44be1aa631a26a8b6771e5d77dd0410a/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:27 UTC	590	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:27 GMT Content-Type: image/webp Content-Length: 6110 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 14 Oct 2022 17:31:24 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 83a3b2ed2c62741 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:27 UTC	6110	IN	Data Raw: 52 49 46 46 d6 17 00 00 57 45 42 50 56 50 38 20 ca 17 00 00 90 75 00 9d 01 2a a0 00 c8 00 3e 51 22 8e 44 a1 a1 09 dc f3 84 0c 02 82 59 c7 0d 03 82 83 13 58 fd 77 9b 0d 3c e3 87 e9 8f 9a 97 a8 ae 7a 2b 2a 8c 60 b9 1f fb 6f 5d bf b1 fe 8f ca 76 e4 7d ab ea 2f 6f 8f f2 3c 13 fd a7 c4 2f 15 7b 80 77 2f f6 ff f6 bc b5 3e fb ff 27 d3 8e 76 1f 53 33 1f 40 8f d0 df f4 bd a1 7f e0 f2 fd fb 57 fc 7f 61 5e 99 87 e6 9f c4 46 af be a5 b2 5e db 6e 8d dc d4 de e2 ce 9c f1 1f 25 35 ff 8c c2 37 bd d8 7d f1 a6 d1 93 f7 7e c5 6e b2 4e ba c8 e9 9c fa e6 27 e3 c9 49 9b f7 e0 79 2e a8 74 1b d7 4d dd af 5b c1 aa 94 16 e1 c0 7f fa 1d 25 5f d0 2e 08 82 cc 50 ce f1 14 a6 c3 16 5b 64 2d 2f 1f 0d 35 a5 ea 78 70 15 f7 b0 23 2f f5 d0 f6 a7 5b fa 30 af 97 bc 5b c4 df 8d 0e e5 c8 51 8b Data Ascii: RIFFWEBPVP8 u>Q"DYXw<z+`o]v}/o</{w/>'vS3@Wa^F^n%57}~nN'Iy.tM[%_.P[d-/5xp#/[0[Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50168	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:26 UTC	413	OUT	GET /get-yabs_performance/405900/pic09bd08e399f3a9b70a18adebb38f6c9b/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:27 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:27 GMT Content-Type: image/jpeg Content-Length: 4989 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 27 Nov 2023 16:42:25 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: e48d6a680ead6f33 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:37:27 UTC	4989	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 5e 01 5e 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 85 03 01 21 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 06 07 05 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ea c9 12 10 20 60 c1 c8 72 95 85 Data Ascii: JFIF^^C!"$"$C! `r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50166	77.88.21.36	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:26 UTC	382	OUT	GET /favicon/manner-matter.ru?size=120&stub=2 HTTP/1.1 Host: favicon.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:27 UTC	220	IN	HTTP/1.1 200 Ok Cache-Control: max-age=691200 Connection: Close Content-Type: image/png Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block access-control-allow-origin: *
2023-12-31 23:37:27 UTC	3278	IN	Data Raw: 43 43 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 0c 8e 49 44 41 54 78 01 ec d1 41 11 00 20 0c 03 b0 41 ff f5 ef 16 7c ec 12 0b 39 6d df ac c5 1d 04 23 18 c1 08 46 30 82 11 2c 18 c1 08 46 30 82 11 8c 60 c1 08 46 30 82 11 8c e0 6d 04 23 18 c1 82 11 8c 60 04 23 18 c1 08 16 8c 60 04 23 18 c1 49 3e 37 67 b0 6a 5e 18 45 f1 45 ff 91 09 25 30 02 41 11 51 f0 02 c6 30 16 19 29 c6 48 90 60 c6 4c 44 ca 1b c8 0b 9d f3 28 e7 fc 5b e3 fb e9 1e be af 7b 6f 67 8d cf f7 6b af bd f7 da c3 03 af d7 0b a7 53 4d 69 0e 87 03 1e 8f 87 5c 65 3c b7 db ad 94 c7 fa e8 d7 f6 03 a6 c9 5a ad 86 fd 7e 8f 6a b5 aa c4 74 2a 95 c2 7a bd 46 a5 52 51 c2 4b 26 93 58 ad 56 ca 78 ac 8f 3c b1 5f 1b 0d 38 1e 8f 63 36 9b e1 7e Data Ascii: CC7PNGIHDRxx9d6IDATxA A\|9m#F0,F0`F0m#`#`#I>7gj^EE%0AQ0)H`LD([{ogkSMi\e<Z~jt*zFRQK&XVx<_8c6~
2023-12-31 23:37:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50169	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:27 UTC	645	OUT	GET /get-yabs_performance/9820086/2a0000018846f0fdc4347d85e1104be97e5b/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:27 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:27 GMT Content-Type: image/webp Content-Length: 1960 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 23 May 2023 04:49:38 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 851e2dc73197c460 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]} Timing-Allow-Origin: *
2023-12-31 23:37:27 UTC	1960	IN	Data Raw: 52 49 46 46 a0 07 00 00 57 45 42 50 56 50 38 20 94 07 00 00 b0 33 00 9d 01 2a a5 00 c8 00 3e 51 26 8e 45 a1 a1 0a 3c 9a 94 0c 02 82 5a 47 d7 94 c2 4a 56 70 e6 01 32 37 f2 cc 15 21 be a7 be 67 d7 45 d2 ef ce ee 37 ff 65 cb 07 f4 0f f7 7e a4 5f da ff 5e 3d e5 3f c1 f2 fc f9 fe 6f a3 36 1e 82 dc df be 11 2c 15 b3 a4 4d f4 9d c6 a0 58 ab 16 ec 77 0a 72 69 88 28 d6 86 03 a2 29 18 a9 98 38 ba 38 7d 51 99 e7 35 60 23 3f e0 e7 b5 3b 52 8e 7c 04 3a cd 5a 9b d0 5f 35 e2 ed af b7 1f 9f 9a bc 79 41 d7 47 f7 ae c6 62 8d c6 7c 09 56 09 a3 f7 27 b9 3a 61 a4 6f ec ee 77 50 b0 32 2a 68 e7 37 ab 7c 66 d6 21 fe 53 4f 2f 16 ad e9 5e e5 b0 f0 55 bd d6 c2 5b 5e b1 42 de 53 6b 2b 84 2f de b4 ac f7 bc 16 28 52 f9 93 f0 f9 27 f5 e2 8c 24 8f 55 e4 65 2d ee 9f a8 7e 11 86 a4 4a 15 Data Ascii: RIFFWEBPVP8 3>Q&E<ZGJVp27!gE7e~_^=?o6,MXwri()88}Q5`#?;R\|:Z_5yAGb\|V':aowP2h7\|f!SO/^U[^BSk+/(R'$Ue-~J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50170	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:27 UTC	415	OUT	GET /get-yabs_performance/6888053/2a0000018442f6c30046ecd4e432f1af70b7/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:27 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:27 GMT Content-Type: image/jpeg Content-Length: 7057 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 04 Nov 2022 14:06:18 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 34bd6aafd15638bf NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:27 UTC	7057	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 a9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 02 00 01 04 05 07 03 06 08 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 d4 d1 26 45 3a 05 8d 81 Data Ascii: JFIFHHC!"$"$C"&E:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50171	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:27 UTC	643	OUT	GET /get-yabs_performance/964857/pic5371b9e76473c0338bddc27ec895513c/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:28 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:28 GMT Content-Type: image/webp Content-Length: 2008 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 02 Dec 2022 06:30:05 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: bab76b27e7bbe47a NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:28 UTC	2008	IN	Data Raw: 52 49 46 46 d0 07 00 00 57 45 42 50 56 50 38 20 c4 07 00 00 f0 26 00 9d 01 2a be 00 c8 00 3e 51 28 91 46 a1 a1 08 95 76 2e 0c 02 82 5a 5b af 4e 62 02 b2 2b 8e 91 a5 d4 5e 97 b6 ea f3 c7 7a 00 de 52 fe 45 be e5 fe 52 81 4f 44 30 73 c7 9f 4c 9a 85 f7 36 fa f7 39 f6 36 d9 9d fc 7d 46 bb d3 ce f7 7b 47 d9 3f db fb 00 7e 68 f4 30 ce 07 d6 fe c0 bd 21 bd 19 3b 5b 9d 18 2b 67 91 37 22 71 1a a8 b3 82 fb 2a 94 22 d1 dc 72 5b 38 6d b8 f4 03 3e 7c c6 5a c4 b5 57 ae 13 ac 33 87 d8 b7 d3 0f 08 d3 9c 16 7e 22 83 45 25 5b 4c 21 40 b8 fa 4a 4c 79 cc d0 46 c5 06 a3 a0 af 6c 96 fc 6f 8f 07 bc 1e b6 7d 50 f9 e2 42 43 b5 45 67 19 bb f6 3c 5a 8e 10 e2 1a 06 88 06 bd 62 76 1f 1f 99 c7 00 9d 1d 84 a5 df e0 34 90 17 09 60 a4 86 fe 2f b1 b3 b8 3d eb 00 eb 1c 08 3a 59 98 82 f8 10 Data Ascii: RIFFWEBPVP8 &>Q(Fv.Z[Nb+^zREROD0sL696}F{G?~h0!;[+g7"q"r[8m>\|ZW3~"E%[L!@JLyFlo}PBCEg<Zbv4`/=:Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50172	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:27 UTC	414	OUT	GET /get-yabs_performance/5551285/picb27d5ed63233acd4d9256fdcb60995bd/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:28 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:28 GMT Content-Type: image/jpeg Content-Length: 3791 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Mon, 12 Sep 2022 17:19:07 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: b3486be75ebd3084 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]} Timing-Allow-Origin: *
2023-12-31 23:37:28 UTC	3791	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 07 02 04 05 03 01 08 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b9 40 00 00 00 00 00 00 Data Ascii: JFIFC!"$"$C@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50174	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:28 UTC	414	OUT	GET /get-yabs_performance/7706666/pic44be1aa631a26a8b6771e5d77dd0410a/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:28 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:28 GMT Content-Type: image/jpeg Content-Length: 7884 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 14 Oct 2022 17:31:24 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 9085ea46bcaa521c NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:28 UTC	7884	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 05 02 04 06 00 01 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fa b7 9e f5 46 33 f2 b3 6b Data Ascii: JFIFC!"$"$C"F3k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50173	87.250.247.183	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:28 UTC	644	OUT	GET /get-yabs_performance/7709329/pic6745b9a6daae8812b84cbc1308a983be/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://faq-kak.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:28 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:28 GMT Content-Type: image/webp Content-Length: 6296 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sun, 16 Oct 2022 00:06:18 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 113629ba466e7fff NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:28 UTC	6296	IN	Data Raw: 52 49 46 46 90 18 00 00 57 45 42 50 56 50 38 20 84 18 00 00 b0 6a 00 9d 01 2a c8 00 c8 00 3e 51 26 8f 45 a1 a1 08 f5 36 d8 0c 02 82 59 db 6e 5f f3 8a 1c 83 38 35 c5 e0 0e 04 a6 fa 69 c4 38 a8 3e 18 7d 06 f6 bf 4d 7f e8 71 27 74 e2 3a 2c aa 25 f5 cb fa 87 96 17 b2 46 42 fb 33 d4 23 be bf d2 7e 60 7c 63 fe df bf 5f 95 9a 81 7b 5b fd 6f a4 c7 da f6 a4 ec 7f eb fd 03 bd da fb b7 fb df 52 4f c7 f3 53 e7 1f dc 03 f5 7b fe 27 96 df 87 df 9f 7e c8 fc 02 ff 42 fe e5 ff 4b fb bf b3 97 fc df 75 5e f1 7f 63 ff 69 ff 9f dc 47 f5 bf fe 57 ec 6f be d7 b3 5f dd 4f 63 8f da ff ff e4 dc 85 7a 55 d6 89 22 30 85 2a 02 8c b4 13 e8 db e0 0b e6 7f ca 63 e1 ba 1d 61 5d eb 9d db a2 d9 d8 cb 3b 89 d5 b8 a5 77 0f 1d 82 47 99 61 12 7f 93 57 a8 e7 af 51 6e e9 01 d4 1e 7e 13 1a c9 f3 Data Ascii: RIFFWEBPVP8 j>Q&E6Yn_85i8>}Mq't:,%FB3#~`\|c_{[oROS{'~BKu^ciGWo_OczU"0ca];wGaWQn~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50175	87.250.247.182	443	4820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:28 UTC	415	OUT	GET /get-yabs_performance/9820086/2a0000018846f0fdc4347d85e1104be97e5b/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:28 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:28 GMT Content-Type: image/jpeg Content-Length: 4459 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Tue, 23 May 2023 04:49:38 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: 24fd455dc5717da0 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=VLA"}]} Timing-Allow-Origin: *
2023-12-31 23:37:28 UTC	4459	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 aa 00 aa 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 a5 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 00 03 07 06 05 04 08 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 02 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f4 f1 a2 30 e3 0c 12 04 84 21 Data Ascii: JFIFC!"$"$C0!

Session ID	Source IP	Source Port	Destination IP	Destination Port
413	192.168.2.4	50176	87.250.247.182	443

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:29 UTC	413	OUT	GET /get-yabs_performance/964857/pic5371b9e76473c0338bddc27ec895513c/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:29 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:29 GMT Content-Type: image/jpeg Content-Length: 4333 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Fri, 02 Dec 2022 06:30:05 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: c3a19b4880dfe473 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=MYT"}]} Timing-Allow-Origin: *
2023-12-31 23:37:29 UTC	4333	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 be 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 07 03 05 06 04 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 d5 7d 7c 99 20 11 61 4c ac Data Ascii: JFIF,,C!"$"$C}\| aL

Session ID	Source IP	Source Port	Destination IP	Destination Port
414	192.168.2.4	50177	87.250.247.182	443

Timestamp	Bytes transferred	Direction	Data
2023-12-31 23:37:29 UTC	414	OUT	GET /get-yabs_performance/7709329/pic6745b9a6daae8812b84cbc1308a983be/big HTTP/1.1 Host: avatars.mds.yandex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-12-31 23:37:29 UTC	591	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 31 Dec 2023 23:37:29 GMT Content-Type: image/jpeg Content-Length: 9218 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Last-Modified: Sun, 16 Oct 2022 00:06:18 GMT Cache-Control: max-age=31536000,immutable X-Request-Id: b20c9db4248a1f60 NEL: {"report_to": "network-errors", "max_age": 600, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: {"group": "network-errors", "max_age": 600, "endpoints": [ { "url": "https://dr.yandex.net/s3_nel?datacenter=SAS"}]} Timing-Allow-Origin: *
2023-12-31 23:37:29 UTC	9218	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f4 2e 5b b6 cb 6c 74 71 95 Data Ascii: JFIFHHC!"$"$C.[ltq

Target ID:	0
Start time:	00:36:05
Start date:	01/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:36:07
Start date:	01/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=2000,i,4763310102164380363,1880677161690082003,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:36:09
Start date:	01/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Windows Analysis Report
https://faq-kak.ru/kak-najti-svoyu-biblioteku-v-steam/