qiwi.gg/_next/static/media/2aaf0723e720e8b9-s.p.woff2
76.76.21.21200 OK 38 kB URL GET HTTP/2 qiwi.gg/_next/static/media/2aaf0723e720e8b9-s.p.woff2
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 37780, version 1.0\012- data
Hash e1b9f0ecaaebb12c93064cd3c406f82b
f0e872352fc5af11960d0eb4fd6ed09e9e98f4ab
39e72c0794c12f2dbb14a0f61ca946b535f795b1478fcf795bd26e5cb52ded34
GET /_next/static/media/2aaf0723e720e8b9-s.p.woff2 HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="2aaf0723e720e8b9-s.p.woff2"
content-type: font/woff2
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: "e1b9f0ecaaebb12c93064cd3c406f82b"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/media/2aaf0723e720e8b9-s.p.woff2
x-vercel-cache: HIT
x-vercel-id: arn1::ngqsk-1694358066023-ecde4abb5658
content-length: 37780
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/main-app-73598e3d66feb4f9.js
76.76.21.21200 OK 419 B URL GET HTTP/2 qiwi.gg/_next/static/chunks/main-app-73598e3d66feb4f9.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (419), with no line terminators
Hash a443e3a833a497d9e3281370dd4143cb
7cbafd95d70425c5972d824e352f32d44a0e2bea
a3181d57f0f232b258addde56fc6ecbe1825ea99c9abbe25b01c25595c94b6d1
GET /_next/static/chunks/main-app-73598e3d66feb4f9.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 2293
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-app-73598e3d66feb4f9.js"
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: "a443e3a833a497d9e3281370dd4143cb"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/main-app-73598e3d66feb4f9.js
x-vercel-cache: HIT
x-vercel-id: arn1::ngqsk-1694358066029-9671c3b0c28f
content-length: 419
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash c837d5056b9424a7006e574bfc7c03ae
a47e514b93e12d1e333ff23ac9e7977ca1cd07bc
76e19e4cf87ceffa781f75bcaf8343f625c82242facbd389bd54ed288d9199e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 15:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-BN5XKFCNM9
142.250.74.168200 OK 92 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-BN5XKFCNM9
IP 142.250.74.168:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintE6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (5857)
Hash 922d57b6f31b7c232993ddab3f35d0ac
7fafe4c91d607f6084e0242181a27bcddf1e2e29
a9d51be877a66512daba21ddd0ef95bcd45f60918b72bdc923ea5e1f26b7730e
GET /gtag/js?id=G-BN5XKFCNM9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 10 Sep 2023 15:01:06 GMT
expires: Sun, 10 Sep 2023 15:01:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 92284
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d2yeczd6cyyd0z.cloudfront.net/?zceyd=994201
143.204.42.153200 OK 103 kB URL GET HTTP/2 d2yeczd6cyyd0z.cloudfront.net/?zceyd=994201
IP 143.204.42.153:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15948)
Size 103 kB (102804 bytes)
Hash 0b0bb389b31ca01349d39df4fe99a843
1147d0373548b92d9d49077b7d7ba252e4b1c610
d0d879124450e08e09d60182ee73232a9802721eb21e0ae2d16c4d11b1e8b27c
GET /?zceyd=994201 HTTP/1.1
Host: d2yeczd6cyyd0z.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 102804
date: Sun, 10 Sep 2023 15:01:06 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I84NZfQxMycqIuxJ6V6xMKU9vQUt1Vlokqqh_AVGjm8o71f_W8_2CA==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash c837d5056b9424a7006e574bfc7c03ae
a47e514b93e12d1e333ff23ac9e7977ca1cd07bc
76e19e4cf87ceffa781f75bcaf8343f625c82242facbd389bd54ed288d9199e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 15:01:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
qiwi.gg/_next/static/chunks/8dc5345f-a04698bc4dd02774.js
76.76.21.21200 OK 659 B URL GET HTTP/2 qiwi.gg/_next/static/chunks/8dc5345f-a04698bc4dd02774.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (659), with no line terminators
Hash 7dda7654daf836939909660e0f012ff6
cefbd02e9576fe08600eee642ec2ae105bbaeaf4
82986c3444235c793dffbe4197bcab7589dcb607617fcb6b183ac1e0369396a1
GET /_next/static/chunks/8dc5345f-a04698bc4dd02774.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 2446
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="8dc5345f-a04698bc4dd02774.js"
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: "7dda7654daf836939909660e0f012ff6"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/8dc5345f-a04698bc4dd02774.js
x-vercel-cache: HIT
x-vercel-id: arn1::xdws6-1694358066559-2b31698c58cf
content-length: 659
X-Firefox-Spdy: h2
empafnyfiexpectt.info/bWpObUFCVS0efAg+A1wVBl8HLDYjT3wvJzgNAikJAU98KxIaGQwJcgJMOgQlUFN3WXNdW2gdKAlXf0syGQs6GDJQW2gELwsFc0s3UFtgXnVDWXpDcUsfc1xnGRovCnxcTD4ZNQFXf1t4WVl7VXFbXHpUeQ
188.114.97.1204 No Content 0 B URL GET HTTP/2 empafnyfiexpectt.info/bWpObUFCVS0efAg+A1wVBl8HLDYjT3wvJzgNAikJAU98KxIaGQwJcgJMOgQlUFN3WXNdW2gdKAlXf0syGQs6GDJQW2gELwsFc0s3UFtgXnVDWXpDcUsfc1xnGRovCnxcTD4ZNQFXf1t4WVl7VXFbXHpUeQ
IP 188.114.97.1:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectempafnyfiexpectt.info
Fingerprint0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B
ValidityMon, 04 Sep 2023 06:52:14 GMT - Sun, 03 Dec 2023 06:52:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /bWpObUFCVS0efAg+A1wVBl8HLDYjT3wvJzgNAikJAU98KxIaGQwJcgJMOgQlUFN3WXNdW2gdKAlXf0syGQs6GDJQW2gELwsFc0s3UFtgXnVDWXpDcUsfc1xnGRovCnxcTD4ZNQFXf1t4WVl7VXFbXHpUeQ HTTP/1.1
Host: empafnyfiexpectt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 15:01:06 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IerFnonud7AgTBTV2J0MlgLwtAf8S89G0k6ZV%2BoDBYPypoXWdpKwUiXBh3nxN4o8p5z4UOcoqf99S4fXA7z9RVgHss1VTAiIq2imid4QE5B5530nFnETHcHONY%2F5%2ByRgVTx84UXKHYk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80488b5bac7ab51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aticalfelixstownrus.info/utx?cb=B6V9jl0npRDf&top=qiwi.gg&tid=994201
108.157.214.95204 No Content 0 B URL GET HTTP/2 aticalfelixstownrus.info/utx?cb=B6V9jl0npRDf&top=qiwi.gg&tid=994201
IP 108.157.214.95:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerAmazon
Subjectaticalfelixstownrus.info
FingerprintD6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=B6V9jl0npRDf&top=qiwi.gg&tid=994201 HTTP/1.1
Host: aticalfelixstownrus.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 15:01:06 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://qiwi.gg
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sun, 10 Sep 2023 15:02:06 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 30a448a0dbd4a52ea118d2e64f0535c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: _i3Ik6fB_8ZvCL4N2NhdOt9a5OfVHjFRcbBo4KcSDvG0K5mQnvvTYg==
X-Firefox-Spdy: h2
empafnyfiexpectt.info/anFwOXdFThNKSicfGwwUASQybRAeNBZ4AyQyNWtFKDQbdCYENFZNHg5MSQBBU0ZAHwcDFU0IURkFEU0CGUxBHx4EFx8EURxMQRdEXl9DDVlaVwUERkwFAFgQV0BWSQMeHU0IQVNFQwxPWkdGDEVa
188.114.97.1204 No Content 0 B URL GET HTTP/2 empafnyfiexpectt.info/anFwOXdFThNKSicfGwwUASQybRAeNBZ4AyQyNWtFKDQbdCYENFZNHg5MSQBBU0ZAHwcDFU0IURkFEU0CGUxBHx4EFx8EURxMQRdEXl9DDVlaVwUERkwFAFgQV0BWSQMeHU0IQVNFQwxPWkdGDEVa
IP 188.114.97.1:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectempafnyfiexpectt.info
Fingerprint0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B
ValidityMon, 04 Sep 2023 06:52:14 GMT - Sun, 03 Dec 2023 06:52:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /anFwOXdFThNKSicfGwwUASQybRAeNBZ4AyQyNWtFKDQbdCYENFZNHg5MSQBBU0ZAHwcDFU0IURkFEU0CGUxBHx4EFx8EURxMQRdEXl9DDVlaVwUERkwFAFgQV0BWSQMeHU0IQVNFQwxPWkdGDEVa HTTP/1.1
Host: empafnyfiexpectt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 15:01:06 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n%2BBztd0nzbcd3cJygsQrAUDP%2B%2Fso3O%2BGLGAEgBgbSeP7bBwIjOf55kBGi8UDj0Yff9nrykSzApDwKcXHWQhy1b0lBoXaI56Th4Dfe53%2FgstCWo5eb%2F4MlgqTZsM%2Fm25Huauv6gKdtK8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80488b5bdcacb51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aticalfelixstownrus.info/bTJWSGkMUDUlVgwPNG4cH15rbVsrF2QODV9LMysTCQQ1MRAJAixmCgFdIywPH104PEcDVyJtWytZMh8FJmNkIz4vWwckPwp3FwQHWGMCDlAXVhAkPSxIPTsrGmQDDwMCcRQkUVtREHgIIkViCyYuZy4HPjhWEj9YXlFmcDMucQcjPyt/GwIqL2cEDVEfeCE8IDVlIXsuP10VLBM8UBQaLBh4FwkPJWEUJCEvYAMCEBpmHgk8AHs9MCEhAW88PjtwNC0EHmAEDgEbURU8ODoBOT4oL0E1BQQ3UAQaLxRWAhItNWVvPyJccDQtAyhUAw4GIVE6JCQ/AXs4GDl3MhIlPmsdAA43RDUbUCVlDjwTOmcEEgxfaDQaOFVYGxkeOXA8AgQ6SBgRDF54Hho8VRdkDg8BVXAiGgJcJnU5FFklfhleBjkaLSxjBhAa
108.157.214.95200 OK 1.2 kB URL GET HTTP/2 aticalfelixstownrus.info/bTJWSGkMUDUlVgwPNG4cH15rbVsrF2QODV9LMysTCQQ1MRAJAixmCgFdIywPH104PEcDVyJtWytZMh8FJmNkIz4vWwckPwp3FwQHWGMCDlAXVhAkPSxIPTsrGmQDDwMCcRQkUVtREHgIIkViCyYuZy4HPjhWEj9YXlFmcDMucQcjPyt/GwIqL2cEDVEfeCE8IDVlIXsuP10VLBM8UBQaLBh4FwkPJWEUJCEvYAMCEBpmHgk8AHs9MCEhAW88PjtwNC0EHmAEDgEbURU8ODoBOT4oL0E1BQQ3UAQaLxRWAhItNWVvPyJccDQtAyhUAw4GIVE6JCQ/AXs4GDl3MhIlPmsdAA43RDUbUCVlDjwTOmcEEgxfaDQaOFVYGxkeOXA8AgQ6SBgRDF54Hho8VRdkDg8BVXAiGgJcJnU5FFklfhleBjkaLSxjBhAa
IP 108.157.214.95:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerAmazon
Subjectaticalfelixstownrus.info
FingerprintD6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3030), with no line terminators
Hash a9b34a20f362ffd164d87ae78e2ad524
fbea9bcffd0c406b750b47f887803e6f01392963
c024ac6b9644033342c30cb533e479652791cd386c42a1a570e347bad47803c3
GET /bTJWSGkMUDUlVgwPNG4cH15rbVsrF2QODV9LMysTCQQ1MRAJAixmCgFdIywPH104PEcDVyJtWytZMh8FJmNkIz4vWwckPwp3FwQHWGMCDlAXVhAkPSxIPTsrGmQDDwMCcRQkUVtREHgIIkViCyYuZy4HPjhWEj9YXlFmcDMucQcjPyt/GwIqL2cEDVEfeCE8IDVlIXsuP10VLBM8UBQaLBh4FwkPJWEUJCEvYAMCEBpmHgk8AHs9MCEhAW88PjtwNC0EHmAEDgEbURU8ODoBOT4oL0E1BQQ3UAQaLxRWAhItNWVvPyJccDQtAyhUAw4GIVE6JCQ/AXs4GDl3MhIlPmsdAA43RDUbUCVlDjwTOmcEEgxfaDQaOFVYGxkeOXA8AgQ6SBgRDF54Hho8VRdkDg8BVXAiGgJcJnU5FFklfhleBjkaLSxjBhAa HTTP/1.1
Host: aticalfelixstownrus.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1183
date: Sun, 10 Sep 2023 15:01:06 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 30a448a0dbd4a52ea118d2e64f0535c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: S8yJHMJcSJeYcqgDxhr2C5oxeVlN1NyYgvW-CVhvbQjEpTJbkmjrTA==
X-Firefox-Spdy: h2
aticalfelixstownrus.info/Y3NuVkECEQ07fgJODHA0ER9Tc3MlVlwQJVEKCzU7B0UNLzgHQxR4Ig8cGzInERwAIm8NFhpzcyUhD2QtVSQrZgghGz9zcyEQBm4AKx44ZhQPQic3CRs9LyEqUDoWIhQnNBZmAgsyPho2VwkmPwxVFjtmJSI3FiEWU0s5GRIuPjgQNlo6GT4UMEBaJQUUByY0BhAVKQQUGRAsISMgGi8mBSIyPxoCBz0mFDUPOi8HFSYJPz4CCAsnHi8LNTkAeBIVOxsTMEECORYgBwg3L1M7LxQQFz07YyMwGixnGTcpIzQGCyolZ3gSFTw9JztBHRsWDx8qMi9SMDoTbAscJTF1KDY6Mi40IFcfICsLDAEUFxwIE3QBIARiKiQiGTUPGSUhATsbAwgQMSsgAGJ1NR8JcCsQHAAmfBVHVzc4FgQtDjY6EVo
108.157.214.95200 OK 1.2 kB URL GET HTTP/2 aticalfelixstownrus.info/Y3NuVkECEQ07fgJODHA0ER9Tc3MlVlwQJVEKCzU7B0UNLzgHQxR4Ig8cGzInERwAIm8NFhpzcyUhD2QtVSQrZgghGz9zcyEQBm4AKx44ZhQPQic3CRs9LyEqUDoWIhQnNBZmAgsyPho2VwkmPwxVFjtmJSI3FiEWU0s5GRIuPjgQNlo6GT4UMEBaJQUUByY0BhAVKQQUGRAsISMgGi8mBSIyPxoCBz0mFDUPOi8HFSYJPz4CCAsnHi8LNTkAeBIVOxsTMEECORYgBwg3L1M7LxQQFz07YyMwGixnGTcpIzQGCyolZ3gSFTw9JztBHRsWDx8qMi9SMDoTbAscJTF1KDY6Mi40IFcfICsLDAEUFxwIE3QBIARiKiQiGTUPGSUhATsbAwgQMSsgAGJ1NR8JcCsQHAAmfBVHVzc4FgQtDjY6EVo
IP 108.157.214.95:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerAmazon
Subjectaticalfelixstownrus.info
FingerprintD6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3023), with no line terminators
Hash e4675008bac0ffaf3ca8b0f112851436
1a2910095d3d99bf7c17437b1a0da0c22f70f754
31f32b7a57824dff28e44785238b87000ebabc4fe9a0a04a4dab88b15c0a6033
GET /Y3NuVkECEQ07fgJODHA0ER9Tc3MlVlwQJVEKCzU7B0UNLzgHQxR4Ig8cGzInERwAIm8NFhpzcyUhD2QtVSQrZgghGz9zcyEQBm4AKx44ZhQPQic3CRs9LyEqUDoWIhQnNBZmAgsyPho2VwkmPwxVFjtmJSI3FiEWU0s5GRIuPjgQNlo6GT4UMEBaJQUUByY0BhAVKQQUGRAsISMgGi8mBSIyPxoCBz0mFDUPOi8HFSYJPz4CCAsnHi8LNTkAeBIVOxsTMEECORYgBwg3L1M7LxQQFz07YyMwGixnGTcpIzQGCyolZ3gSFTw9JztBHRsWDx8qMi9SMDoTbAscJTF1KDY6Mi40IFcfICsLDAEUFxwIE3QBIARiKiQiGTUPGSUhATsbAwgQMSsgAGJ1NR8JcCsQHAAmfBVHVzc4FgQtDjY6EVo HTTP/1.1
Host: aticalfelixstownrus.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1175
date: Sun, 10 Sep 2023 15:01:06 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 30a448a0dbd4a52ea118d2e64f0535c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: iMWpvdHWweNRxEVoo1HOVkB6B2HpbBGtLMomk6iC9tG6DBG5R5Fj9g==
X-Firefox-Spdy: h2
clerk.qiwi.gg/npm/@clerk/clerk-js@4/dist/clerk.browser.js
104.18.20.113307 Temporary Redirect 0 B URL GET HTTP/2 clerk.qiwi.gg/npm/@clerk/clerk-js@4/dist/clerk.browser.js
IP 104.18.20.113:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectclerk.qiwi.gg
FingerprintB2:D7:48:7B:1C:26:91:19:E5:47:09:0E:03:73:F5:20:2B:C1:C2:A1
ValidityWed, 30 Aug 2023 19:03:47 GMT - Tue, 28 Nov 2023 19:03:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/@clerk/clerk-js@4/dist/clerk.browser.js HTTP/1.1
Host: clerk.qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Sun, 10 Sep 2023 15:01:07 GMT
content-length: 0
location: https://clerk.qiwi.gg/npm/@clerk/clerk-js@4.57.0/dist/clerk.browser.js
access-control-allow-origin: *
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
vary: Accept-Encoding
set-cookie: __cf_bm=1017KBPSsCPED1p6xB6OYeOR3JuWj4o2TQeToZ_goKU-1694358067-0-AYCl90t4znOkKkWLv9y1nEmYSYHpaQruddtliGZrQWbkGyaye4mkTvKUdlImGIpX/7aBaq6cC8q/yzjDbEQWjWM=; path=/; expires=Sun, 10-Sep-23 15:31:07 GMT; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
_cfuvid=zCnAR68iJs2C3rBecWEDd1SRgCGB1LsBvWpLdBL_XvE-1694358067030-0-604800000; path=/; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 80488b5eee8256cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
d2yeczd6cyyd0z.cloudfront.net/Ra2l6WE0IBhQ+ch8AHmV0Ul1IaHxNAwk3IxtUDGx0ChAPLw4zHiM6eU0dADxwW08WOSMMVFw9IwhUS34sDwtHbGsfGRUzcBwbCiApDAAQLCdNHBtlIAQTEzQhCkxIHnhFWV9qfUMRS2loWCtfan0HABQtNU5bSiB1XTZMbGhYK19qfRkfX2sMWllDdn1CTE-hoKg4KETdoWS9IaHxbWUtofE5bSj4kGQwcNzVOWzxpfFpHSn44Vlg
143.204.42.153 552 B URL d2yeczd6cyyd0z.cloudfront.net/Ra2l6WE0IBhQ+ch8AHmV0Ul1IaHxNAwk3IxtUDGx0ChAPLw4zHiM6eU0dADxwW08WOSMMVFw9IwhUS34sDwtHbGsfGRUzcBwbCiApDAAQLCdNHBtlIAQTEzQhCkxIHnhFWV9qfUMRS2loWCtfan0HABQtNU5bSiB1XTZMbGhYK19qfRkfX2sMWllDdn1CTE-hoKg4KETdoWS9IaHxbWUtofE5bSj4kGQwcNzVOWzxpfFpHSn44Vlg
IP 143.204.42.153:0
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (753), with no line terminators
Hash 170e0455c9a855579b4857feb7e4f667
a3f3b18ab9c5d8cad9d9bf34e12021914a0c06a9
26ec2410b37ea80c8fd08b14ecfcd258294d88e6226c5e339272ae148432d551
GET /Ra2l6WE0IBhQ+ch8AHmV0Ul1IaHxNAwk3IxtUDGx0ChAPLw4zHiM6eU0dADxwW08WOSMMVFw9IwhUS34sDwtHbGsfGRUzcBwbCiApDAAQLCdNHBtlIAQTEzQhCkxIHnhFWV9qfUMRS2loWCtfan0HABQtNU5bSiB1XTZMbGhYK19qfRkfX2sMWllDdn1CTE-hoKg4KETdoWS9IaHxbWUtofE5bSj4kGQwcNzVOWzxpfFpHSn44Vlg HTTP/1.1
Host: d2yeczd6cyyd0z.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aticalfelixstownrus.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 552
date: Sun, 10 Sep 2023 15:01:07 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4IKOe41wEgQyBmADyJycQPH658W14GrObqcEnJz9-yDr8yY4Rab9mw==
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/685-60fa84fc8dbdcd65.js
76.76.21.21200 OK 2.9 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/685-60fa84fc8dbdcd65.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (5446), with no line terminators
Hash 6f995e2513732182901997a188136ecc
0bca9254727934169b24b23c0ecddac50b34ccbe
d1e32eb14b86432a09d345ef63bc16bf61b7ef880228a9cf272145e2429b93c4
GET /_next/static/chunks/685-60fa84fc8dbdcd65.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="685-60fa84fc8dbdcd65.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"6f995e2513732182901997a188136ecc"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/685-60fa84fc8dbdcd65.js
x-vercel-cache: HIT
x-vercel-id: arn1::6k8h9-1694358066561-927d4530c097
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/bf6a786c-078f369bcdc4e849.js
76.76.21.21200 OK 55 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/bf6a786c-078f369bcdc4e849.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (65201)
Hash 72dcd97d34a2285a2cc88ffa94196859
a58380572a6d9ee3cfcd4f3b3f504f7c87fac3d2
73217b2771815ed5190b088c355ad7bc1e1d34fc3af769d2d17fa572d51d09ac
GET /_next/static/chunks/bf6a786c-078f369bcdc4e849.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 3113
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="bf6a786c-078f369bcdc4e849.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"72dcd97d34a2285a2cc88ffa94196859"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/bf6a786c-078f369bcdc4e849.js
x-vercel-cache: HIT
x-vercel-id: arn1::qnphj-1694358066041-1910b612f915
X-Firefox-Spdy: h2
empafnyfiexpectt.info/popunder.gif
188.114.97.1200 OK 507 B URL GET HTTP/3 empafnyfiexpectt.info/popunder.gif
IP 188.114.97.1:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectempafnyfiexpectt.info
Fingerprint0A:3C:72:5A:AE:C9:CE:C3:ED:9D:55:D4:4A:C3:28:A5:31:C0:1B:2B
ValidityMon, 04 Sep 2023 06:52:14 GMT - Sun, 03 Dec 2023 06:52:13 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 9c6b82e852c51c1017d26b91a2c4cbf6
df67dce7afefdbf9a8a31ad6c96c9be086c1364b
be23d0c5c6dd077cde8c225173dc26a849e5d92f98b85a6c283cea76e6cf27a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /popunder.gif HTTP/1.1
Host: empafnyfiexpectt.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 10 Sep 2023 15:01:07 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 10069
last-modified: Sun, 10 Sep 2023 12:13:18 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uFxwy4N1kQckFSVmFJvlNf4zRmh6h6bNSvkW%2FwB4t69RBzd%2FTq7hH4%2FZv5BAxDMqlvfOe0EQYcD0%2FgEqdoXPkiL9vYUZWgewFPg7Y4K56zlcWaGsNvqCuPjKzlVAcDUTpp7JZ0QyTXQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80488b603e760b41-OSL
alt-svc: h3=":443"; ma=86400
qiwi.gg/?_rsc=cd6is
76.76.21.21200 OK 92 B IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
Hash 148f32bfd1cf875a94c4706238b059fd
b6bbd8659267f607f14bceee15a85241f9edd0d7
8701532a92d60f018d296a360f5cfa20e210a2c560abdb4652c39f587a183253
GET /?_rsc=cd6is HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
RSC: 1
Next-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22file%22%2C%7B%22children%22%3A%5B%5B%22slug%22%2C%222URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip%22%2C%22d%22%5D%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%5D%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D
Next-Router-Prefetch: 1
Next-Url: /file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
DNT: 1
Connection: keep-alive
Cookie: _qiwiKnown=2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip; _ga_BN5XKFCNM9=GS1.1.1694358066.1.0.1694358066.0.0.0; _ga=GA1.1.1928750705.1694358067
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: gzip
content-type: text/x-component
date: Sun, 10 Sep 2023 15:01:07 GMT
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
x-matched-path: /index.rsc
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-execution-region: iad1
x-vercel-id: arn1::iad1::kd75s-1694358066876-c34cf208bd91
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
142.250.74.77302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP 142.250.74.77:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D
ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:ZfVEcTBda-01rtrppI73lBcZp7PYeA:Q3uk-VS3w2E2dtl-; Expires=Tue, 09-Sep-2025 15:01:07 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 15:01:07 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhcRu0KjdWpJRRiM0S8PiRY0qo4B_qmDp1edeRRmbXVKC6w8ZisB7hvz5DhrayeR1kCXj0G5vg
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-qoEaj2sHHUMxTtX_oBtuZg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aticalfelixstownrus.info/utx?cb=ktlzmk2Qxgok&top=qiwi.gg&tid=996970
108.157.214.95204 No Content 0 B URL GET HTTP/2 aticalfelixstownrus.info/utx?cb=ktlzmk2Qxgok&top=qiwi.gg&tid=996970
IP 108.157.214.95:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerAmazon
Subjectaticalfelixstownrus.info
FingerprintD6:60:E2:3A:1A:81:0A:24:51:1B:33:FA:52:EB:2F:F6:58:B1:D6:DB
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=ktlzmk2Qxgok&top=qiwi.gg&tid=996970 HTTP/1.1
Host: aticalfelixstownrus.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 15:01:07 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://qiwi.gg
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sun, 10 Sep 2023 15:02:07 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 30a448a0dbd4a52ea118d2e64f0535c8.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: VVG4W2-DIZqzn7C7flHXs-YJG7D4pTJk3jnEqTdN0V2onUWy9u5EPQ==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 2493dac4863c9b8db5f23a37692ef71b
cca29fa30ba8ee3a86a1ef6a7151244908dba399
00b54431d117fc86713b52c9e0962a39b970d33e163f5551bc770ede78ab5efb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 15:01:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clerk.qiwi.gg/v1/client?_clerk_js_version=4.57.0
104.18.20.113200 OK 31 B URL GET HTTP/3 clerk.qiwi.gg/v1/client?_clerk_js_version=4.57.0
IP 104.18.20.113:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectclerk.qiwi.gg
FingerprintB2:D7:48:7B:1C:26:91:19:E5:47:09:0E:03:73:F5:20:2B:C1:C2:A1
ValidityWed, 30 Aug 2023 19:03:47 GMT - Tue, 28 Nov 2023 19:03:46 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 34793e42c3736afc7ca20a79118f76e9
1840e2edccf4d8e116b95795ead6f1811b5b7795
d9d2f5462aefa4901181b92e71c95006c1ec2342de6fa1f4b6d44147fa214736
GET /v1/client?_clerk_js_version=4.57.0 HTTP/1.1
Host: clerk.qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Cookie: _ga_BN5XKFCNM9=GS1.1.1694358066.1.0.1694358066.0.0.0; _ga=GA1.1.1928750705.1694358067
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 10 Sep 2023 15:01:07 GMT
content-type: application/json
content-length: 31
cf-ray: 80488b602bbc5699-OSL
cf-cache-status: DYNAMIC
cache-control: private
expires: Sun, 10 Sep 2023 15:01:07 GMT
vary: Origin, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-cfworker: 1
x-cloud-trace-context: 5a7f6a67be432aaf78835eb3207c61a2
x-country: NO
access-control-allow-credentials: true
access-control-allow-origin: https://qiwi.gg
access-control-expose-headers: Authorization, X-Country
set-cookie: __client_uat=0; Path=/; Domain=qiwi.gg; Max-Age=315360000; Secure; SameSite=Lax
__cf_bm=u.uTf_NTsI9tePwaZKev6NQohhjhLihpk5fEMOtGFX0-1694358067-0-AQBRavD4EzP0tga4UXNYV1mXNXkjgIwp9UcETMt1EfL90npq/PnFEEN/lPs1Q8/ex+UJrGFk/1vDGeLy1xmTyaE=; path=/; expires=Sun, 10-Sep-23 15:31:07 GMT; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
_cfuvid=Vz6nueX.aRy8_VsiPQ_c.cuDIau7FDHcTDFt9NHGrRo-1694358067423-0-604800000; path=/; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
server: cloudflare
qiwi.gg/_next/static/chunks/app/file/%5Bslug%5D/page-2b2784696418072f.js
76.76.21.21200 OK 171 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/app/file/%5Bslug%5D/page-2b2784696418072f.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (25239)
Size 171 kB (170815 bytes)
Hash 265a88c8cb71970866164a83d14146f9
7fe787925b8a6a11752087593d4e379efa6c02ec
09a395c478c20bc9dbca4e9a28e35b65ceb529921b22add0fdadcb62ad6821b6
GET /_next/static/chunks/app/file/%5Bslug%5D/page-2b2784696418072f.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 1530
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="page-2b2784696418072f.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"265a88c8cb71970866164a83d14146f9"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/app/file/%5Bslug%5D/page-2b2784696418072f.js
x-vercel-cache: HIT
x-vercel-id: arn1::kd75s-1694358066567-4b28e406d01b
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhcRu0KjdWpJRRiM0S8PiRY0qo4B_qmDp1edeRRmbXVKC6w8ZisB7hvz5DhrayeR1kCXj0G5vg
142.250.74.77302 Found 405 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhcRu0KjdWpJRRiM0S8PiRY0qo4B_qmDp1edeRRmbXVKC6w8ZisB7hvz5DhrayeR1kCXj0G5vg
IP 142.250.74.77:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (399)
Hash 9719f90d95b6bb1daa1333bbc6c170b2
11a42c1905a3477839546d18afa3c4f135ac2f4f
99d538fab3783ecfa3f4d86468b97d80dc52b558df28eafffa8e83eb8155bd73
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhcRu0KjdWpJRRiM0S8PiRY0qo4B_qmDp1edeRRmbXVKC6w8ZisB7hvz5DhrayeR1kCXj0G5vg HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:6Adm3RmLolt0GRwbCy7Qg5BlvQpGJQ:71T8E2ZWdxa0TxK5;Path=/;Expires=Tue, 09-Sep-2025 15:01:07 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 15:01:07 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhf0ku9qMQ1O8ubzqtvxqtt6pK1KyXXZvX8fUae8woG6P8bFOoniuHIH78q3SOLoaa-3Oio4BA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1728974284%3A1694358067519931&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-nUL1QlhX4XZhcOQt76xlUw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
clerk.qiwi.gg/npm/@clerk/clerk-js@4.57.0/dist/clerk.browser.js
104.18.20.113200 OK 197 kB URL GET HTTP/2 clerk.qiwi.gg/npm/@clerk/clerk-js@4.57.0/dist/clerk.browser.js
IP 104.18.20.113:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectclerk.qiwi.gg
FingerprintB2:D7:48:7B:1C:26:91:19:E5:47:09:0E:03:73:F5:20:2B:C1:C2:A1
ValidityWed, 30 Aug 2023 19:03:47 GMT - Tue, 28 Nov 2023 19:03:46 GMT
Size 197 kB (197118 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npm/@clerk/clerk-js@4.57.0/dist/clerk.browser.js HTTP/1.1
Host: clerk.qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://qiwi.gg
Referer: https://qiwi.gg/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 15:01:07 GMT
content-type: application/javascript; charset=utf-8
cf-ray: 80488b5f0e9f56cb-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 365519
cache-control: public, max-age=31536000
etag: W/"301fe-j4JF7ZY8xikcJJvT6L+MObE3ROI"
expires: Mon, 09 Sep 2024 15:01:07 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: *
alt-svc: h3=":443"; ma=86400
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-cache: HIT, HIT
x-content-type-options: nosniff
x-jsd-version: 4.57.0
x-jsd-version-type: version
x-served-by: cache-fra-etou8220088-FRA, cache-bma1639-BMA
set-cookie: __cf_bm=QEyJoq9mE0gpdUug_gVkYyA0o_TqeCf5tDnul8naDek-1694358067-0-AbQWy60X59eHvJXpBHq39akTZb2yHRwstSLMgAT6pdYi+otzMB1DUui7nR3xLcBh6yiuvj1QARaigI5d4TIWMBY=; path=/; expires=Sun, 10-Sep-23 15:31:07 GMT; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
_cfuvid=pLUOoa6NwHVE_08mYkZ5tkzmEwmh8Hqz_okduWwvuLI-1694358067071-0-604800000; path=/; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhecLYGyuujjOfaR9_zezISvvfORz4-Jhu3uu3522E4ha9KR75STHkY84f8d0b8p6ElluH01Vw
142.250.74.77302 Found 0 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhecLYGyuujjOfaR9_zezISvvfORz4-Jhu3uu3522E4ha9KR75STHkY84f8d0b8p6ElluH01Vw
IP 142.250.74.77:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhecLYGyuujjOfaR9_zezISvvfORz4-Jhu3uu3522E4ha9KR75STHkY84f8d0b8p6ElluH01Vw HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:H1BAl4ARShOiCT3egFiwkvstC2wDTA:Yu7-QV-dlLzcXZgT;Path=/;Expires=Tue, 09-Sep-2025 15:01:07 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 15:01:07 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhffz884zFTnxQVsDVqfIBD3p0woxdtw3iNMUQXXC23RfIcDG-eibpCTUrNkoNksJxFhdjUz8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1710843242%3A1694358067472780&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-XC6wsXK0UGWeQOAoSlUsdA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 405
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhffz884zFTnxQVsDVqfIBD3p0woxdtw3iNMUQXXC23RfIcDG-eibpCTUrNkoNksJxFhdjUz8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1710843242%3A1694358067472780&theme=glif
142.250.74.77403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhffz884zFTnxQVsDVqfIBD3p0woxdtw3iNMUQXXC23RfIcDG-eibpCTUrNkoNksJxFhdjUz8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1710843242%3A1694358067472780&theme=glif
IP 142.250.74.77:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhffz884zFTnxQVsDVqfIBD3p0woxdtw3iNMUQXXC23RfIcDG-eibpCTUrNkoNksJxFhdjUz8w&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1710843242%3A1694358067472780&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 15:01:07 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-_yvi8KUKbld9mttnKVBB4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pogothere.xyz/asd100.bin
172.64.96.14200 OK 102 kB IP 172.64.96.14:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 15:01:06 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://qiwi.gg
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4280
last-modified: Sun, 10 Sep 2023 13:49:46 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BwMf%2FgxUrcyvDmj8k1mIpHsDa0j5u8dzS8wuxJybzYwkmeD0Mb3KX05nok1eeAtEjCz0OZnh%2F3FGCZmJvYh70ux%2BTf7iRwzrVgHy%2FasPzQGn6whDYhWMsYNthVtRRRHK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80488b5c0d3c2407-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
172.64.96.14200 OK 102 kB IP 172.64.96.14:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Cookie: csu=438398851631945@1@1694358066
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Sep 2023 15:01:07 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://qiwi.gg
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1072
last-modified: Sun, 10 Sep 2023 14:43:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OAuyq1MskDM2oKbWN%2BBsZJ8F%2FFLXfndG%2F8R9pjqt1lx6WKK7x1du4IQXhyUacjPjuks%2F3165HisWLhSX48TwXPMIrfczq1tTb9j2w%2BZhWk%2BHP6JM%2FN6e84UnuQQFxLJk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80488b602bee368f-LHR
alt-svc: h3=":443"; ma=86400
qiwi.gg/_next/static/css/a03ba3fc38a67664.css
76.76.21.21200 OK 11 kB URL GET HTTP/2 qiwi.gg/_next/static/css/a03ba3fc38a67664.css
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (10918), with no line terminators
Hash 118cb8db064ea11d2f1cca7d0ed0e464
fa5bc79dd6123e32e28a45aa0d49acf03dec3adb
e06667dd75fe67db39e0ec558b188dc82fcc162d78ec00cb8cb922433ec3073b
GET /_next/static/css/a03ba3fc38a67664.css HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="a03ba3fc38a67664.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"118cb8db064ea11d2f1cca7d0ed0e464"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/css/a03ba3fc38a67664.css
x-vercel-cache: HIT
x-vercel-id: arn1::gm7s9-1694358066022-b396b3b320bc
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/208-8efd10a845cb28c0.js
76.76.21.21200 OK 97 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/208-8efd10a845cb28c0.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (65192)
Hash d5a7ecc0ac107f722f00f4ccf0b42411
ed505b45e1337f567a5a92d7be9566ca7a1add8d
8752c5c5cf1c21e551ab0991f0018a4d5a9faee90ba4b5bc9f3968a049c267a0
GET /_next/static/chunks/208-8efd10a845cb28c0.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 2096
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="208-8efd10a845cb28c0.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"d5a7ecc0ac107f722f00f4ccf0b42411"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/208-8efd10a845cb28c0.js
x-vercel-cache: HIT
x-vercel-id: arn1::gk5rj-1694358066563-1932bbf7146c
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/app/layout-91e46b4ed10a3355.js
76.76.21.21200 OK 5.8 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/app/layout-91e46b4ed10a3355.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (6003), with no line terminators
Hash 9a7ce395f754006590204511c7b41474
3b017d9e6244a913abf233b5723f07bffc5e22fe
db0174649bcb8801f9e41a51689a885e0b6782b63644c4e1fce214ac8ac1c0bb
GET /_next/static/chunks/app/layout-91e46b4ed10a3355.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 2948
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="layout-91e46b4ed10a3355.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"891ae8d2844fcd717dec3c87fba41708"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/app/layout-91e46b4ed10a3355.js
x-vercel-cache: HIT
x-vercel-id: arn1::gk5rj-1694358066568-3c067eb5125b
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/114-68652afc1fa04b76.js
76.76.21.21200 OK 102 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/114-68652afc1fa04b76.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 102 kB (101611 bytes)
Hash 4f4768298cc6e14b2cc7d5a6f2a06b7c
d6d3b35ee1c05b49e0ae0e4f50957bd39be01cd3
9ff547ebe423bc5c6f27c841ed84e8ddc81408887cf9f083429cdc0445cd497f
GET /_next/static/chunks/114-68652afc1fa04b76.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 1703
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="114-68652afc1fa04b76.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"4f4768298cc6e14b2cc7d5a6f2a06b7c"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/114-68652afc1fa04b76.js
x-vercel-cache: HIT
x-vercel-id: arn1::ngqsk-1694358066025-e9b704a38e05
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/610-2ef8cdae872501dd.js
76.76.21.21200 OK 91 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/610-2ef8cdae872501dd.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 836295df387c7b44eecd9e05fc5296e1
3470cb4a315d3c0f8785d41f00fba5bf5c426d08
9ad2b89eb7bcbaed184d5ee7af50cde275188137063369c014cf34c5b20326bc
GET /_next/static/chunks/610-2ef8cdae872501dd.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="610-2ef8cdae872501dd.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"836295df387c7b44eecd9e05fc5296e1"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/610-2ef8cdae872501dd.js
x-vercel-cache: HIT
x-vercel-id: arn1::gm7s9-1694358066559-dc7c5e2673dc
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
142.250.74.77302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP 142.250.74.77:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D
ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:jPWXfX76oXxLisolhf9TFf9D5kRJgA:G12RZMn69ch4Dt7-; Expires=Tue, 09-Sep-2025 15:01:07 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 15:01:07 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhecLYGyuujjOfaR9_zezISvvfORz4-Jhu3uu3522E4ha9KR75STHkY84f8d0b8p6ElluH01Vw
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-PzWGUm2G6SgJDLSN3gCifg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhf0ku9qMQ1O8ubzqtvxqtt6pK1KyXXZvX8fUae8woG6P8bFOoniuHIH78q3SOLoaa-3Oio4BA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1728974284%3A1694358067519931&theme=glif
142.250.74.77403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhf0ku9qMQ1O8ubzqtvxqtt6pK1KyXXZvX8fUae8woG6P8bFOoniuHIH78q3SOLoaa-3Oio4BA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1728974284%3A1694358067519931&theme=glif
IP 142.250.74.77:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhf0ku9qMQ1O8ubzqtvxqtt6pK1KyXXZvX8fUae8woG6P8bFOoniuHIH78q3SOLoaa-3Oio4BA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1728974284%3A1694358067519931&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 15:01:07 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-u2EdM_Fg-29Ag_H8QUqgsQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
76.76.21.21200 OK 285 kB URL User Request GET HTTP/2 qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
IP 76.76.21.21:443
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
Size 285 kB (285236 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Sun, 10 Sep 2023 15:01:05 GMT
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
x-matched-path: /file/[slug]
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-execution-region: iad1
x-vercel-id: arn1::iad1::ngqsk-1694358065387-8e5188c3d7d6
X-Firefox-Spdy: h2
qiwi.gg/favicon.ico
76.76.21.21200 OK 15 kB IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 5becf3b4fcb61743d2105074aefa0e5f
6a01d2ac916d0cf4f8378a2283d5290a1998a7df
aec0158ad3bc82a429ae8f7e636b231e74d9f7f9453cb44d7b2361a54e6b2bc4
GET /favicon.ico HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 3182
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: image/x-icon
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"5becf3b4fcb61743d2105074aefa0e5f"
server: Vercel
strict-transport-security: max-age=63072000
vary: RSC, Next-Router-State-Tree, Next-Router-Prefetch
x-matched-path: /favicon.ico
x-vercel-cache: HIT
x-vercel-id: arn1::gm7s9-1694358066409-08f6d8bed51f
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.96.14200 OK 26 B IP 172.64.96.14:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ff55e8e341e597567504630cabb1e6f4
40782ba117b48b9768c6a87716d72f2071f7c8b0
323ced5ba5911f76dd843591e4c00e9235d6f5afea8a57fffa8ecba79ef49b5b
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 15:01:06 GMT
content-type: text/plain
set-cookie: csu=438398851631945@1@1694358066; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://qiwi.gg
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kleIALeKBs2%2BZTbus9Yy4j4AZxvKv3vyd%2Ff9cXYBYVBKj3nbcBvnkt5Oig6F5v18hXYIEO95DdSvLDJGgUT7nOUTxMAiuMS%2FyuVR4Cm%2B37tiqh4CZ00QHrnBe%2B0YT9Du"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80488b5c0d312407-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/690-5df00d3369cf3cd8.js
76.76.21.21200 OK 12 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/690-5df00d3369cf3cd8.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (12115), with no line terminators
Hash 6afda4db93d5060dae3c0e87c426c76f
7df92fd539995424c8295f773794d25de9280a8d
1b3da5746e6600df3dae47563e48cee81a405c3b08f814c518ecc85766c82a36
GET /_next/static/chunks/690-5df00d3369cf3cd8.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 1812
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="690-5df00d3369cf3cd8.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"6afda4db93d5060dae3c0e87c426c76f"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/690-5df00d3369cf3cd8.js
x-vercel-cache: HIT
x-vercel-id: arn1::l7f8z-1694358066580-57975f31cce0
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/15-c0db59e44c2d8f4a.js
76.76.21.21200 OK 6.2 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/15-c0db59e44c2d8f4a.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (6350), with no line terminators
Hash 9000470c9e3ee3536736a01deb888ec8
a8bbbde619bc6da6cf2c566c9601f7ee87acdd98
52fa6f61da5b69e04ffd1bedd82e1941a99d3f913124c61cf2bea373d6331d60
GET /_next/static/chunks/15-c0db59e44c2d8f4a.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="15-c0db59e44c2d8f4a.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"d601d2c1624de083a0cc79f6129d8c40"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/15-c0db59e44c2d8f4a.js
x-vercel-cache: HIT
x-vercel-id: arn1::kd75s-1694358066563-12c72ffea936
X-Firefox-Spdy: h2
qiwi.gg/_next/static/chunks/842-62c289cc37c4edf7.js
76.76.21.21200 OK 7.8 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/842-62c289cc37c4edf7.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type troff or preprocessor input, ASCII text, with very long lines (7941), with no line terminators
Hash ec30c2f74f5589734145e5a4519723d1
0234994be26b109f385d66b3bcfd99e864c2ebc8
b1438ea067350272d8bf8d39b2bbcee2a672f7cc5c1faacadde414aaddba884d
GET /_next/static/chunks/842-62c289cc37c4edf7.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="842-62c289cc37c4edf7.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"a8e562bd6e938d82529987a593da6be9"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/842-62c289cc37c4edf7.js
x-vercel-cache: HIT
x-vercel-id: arn1::rdp7m-1694358066567-f84ef87284af
X-Firefox-Spdy: h2
qiwi.gg/_next/static/css/7ce6e4a2a1138cb5.css
76.76.21.21200 OK 9.5 kB URL GET HTTP/2 qiwi.gg/_next/static/css/7ce6e4a2a1138cb5.css
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (9539), with no line terminators
Hash 11d3a97ab20e69bbbe3c65341593deaf
2c919493541d0cad18629885f380413eac48d957
4a8d8d5e5647305fdda4644dd274ceb72781305000c30f128e537f6f2fbcc77e
GET /_next/static/css/7ce6e4a2a1138cb5.css HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="7ce6e4a2a1138cb5.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"aa7a395604054797b122e7f99ea9cdb4"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/css/7ce6e4a2a1138cb5.css
x-vercel-cache: HIT
x-vercel-id: arn1::qnphj-1694358066023-ea4f3cd5169d
X-Firefox-Spdy: h2
pogothere.xyz/
172.64.96.14200 OK 26 B IP 172.64.96.14:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ff55e8e341e597567504630cabb1e6f4
40782ba117b48b9768c6a87716d72f2071f7c8b0
323ced5ba5911f76dd843591e4c00e9235d6f5afea8a57fffa8ecba79ef49b5b
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Cookie: csu=438398851631945@1@1694358066
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Sep 2023 15:01:07 GMT
content-type: text/plain
set-cookie: csu=438398851631945@2@1694358066; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://qiwi.gg
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0yylV9%2BcpmK7OTOQDjfkRgnVfwr1inX7%2BfXjhewejrjefiXWggw%2BMprLaYXmYngRi5AJ502BSMDEjMkJ7OL7gS4NZrV87sxVUYHqCQpOy4vP9KX32nmvlD6o%2BtAw0cPG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80488b602bef368f-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
clerk.qiwi.gg/v1/environment?_clerk_js_version=4.57.0
104.18.20.113200 OK 7.8 kB URL GET HTTP/3 clerk.qiwi.gg/v1/environment?_clerk_js_version=4.57.0
IP 104.18.20.113:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectclerk.qiwi.gg
FingerprintB2:D7:48:7B:1C:26:91:19:E5:47:09:0E:03:73:F5:20:2B:C1:C2:A1
ValidityWed, 30 Aug 2023 19:03:47 GMT - Tue, 28 Nov 2023 19:03:46 GMT
File type troff or preprocessor input, ASCII text, with very long lines (8677), with no line terminators
Hash cc9b3fea6b0fde3e046106104c9721de
68a25b9d805709a0e48efb2d0d0e7532962d76b2
60cb4117319b4fe6ffef6b78a44ac81d3c80372bfd0f086f27ea25d7e98b644e
GET /v1/environment?_clerk_js_version=4.57.0 HTTP/1.1
Host: clerk.qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://qiwi.gg/
Origin: https://qiwi.gg
DNT: 1
Connection: keep-alive
Cookie: _ga_BN5XKFCNM9=GS1.1.1694358066.1.0.1694358066.0.0.0; _ga=GA1.1.1928750705.1694358067
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 10 Sep 2023 15:01:07 GMT
content-type: application/json
cf-ray: 80488b602bba5699-OSL
cf-cache-status: DYNAMIC
cache-control: private
expires: Sun, 10 Sep 2023 15:01:07 GMT
vary: Origin, Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-cfworker: 1
x-country: NO
access-control-allow-credentials: true
access-control-allow-origin: https://qiwi.gg
access-control-expose-headers: Authorization, X-Country
set-cookie: __client_uat=0; Path=/; Domain=qiwi.gg; Max-Age=315360000; Secure; SameSite=Lax
__cf_bm=fNTPlppZRIi4TC86LqTEsp5TzCHlWe68P.JM858KZfA-1694358067-0-Acp6eNOAIcMsv5RzTeM7pT6iiDdpmFEzx2x9SychfJ1JXA3+axR13+bL2Nf/UiydDM+FkdhFVaB5ms4l6EQGaiM=; path=/; expires=Sun, 10-Sep-23 15:31:07 GMT; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
_cfuvid=aN_BOqyBgV2BkI5u9GXwueJgfV_DLyyFlIHz8v6bFvI-1694358067392-0-604800000; path=/; domain=.clerk.qiwi.gg; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
qiwi.gg/_next/static/chunks/webpack-af2e3bf831d7e9bb.js
76.76.21.21200 OK 4.1 kB URL GET HTTP/2 qiwi.gg/_next/static/chunks/webpack-af2e3bf831d7e9bb.js
IP 76.76.21.21:443
Requested by https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Certificate IssuerLet's Encrypt
Subjectqiwi.gg
FingerprintD5:AA:56:70:FB:92:66:59:73:12:28:2A:5D:8A:E9:C7:FC:FC:A2:8E
ValidityThu, 13 Jul 2023 16:36:48 GMT - Wed, 11 Oct 2023 16:36:47 GMT
File type ASCII text, with very long lines (4183), with no line terminators
Hash 78c2dd43d93bccbfab13f1fc9ab69d1e
04f9b4f5260424bacf2cfaf6ead7719e8efd8bee
b5b842dc8916ceed922e6b7fa69382ecb97d9ca954e36e485ca3f7682f13cfc4
GET /_next/static/chunks/webpack-af2e3bf831d7e9bb.js HTTP/1.1
Host: qiwi.gg
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://qiwi.gg/file/2URdVsKKW0RD1aBs7QZBnprYk3O-322311-sstef-Oyunindirvip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 3179
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-af2e3bf831d7e9bb.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Sun, 10 Sep 2023 15:01:06 GMT
etag: W/"446bec63bff36418edbfee0af6fa133c"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/webpack-af2e3bf831d7e9bb.js
x-vercel-cache: HIT
x-vercel-id: arn1::kd75s-1694358066024-2d92a046f144
X-Firefox-Spdy: h2