"927,tracot,com,v2,a,pop,152549,h,upgrade,insecure,requests:,1

Повышаем безопасность сайта - Айри.рф

: these are likely internal parameters used by the tracking platform to identify the version ( v2 ), the type of ad or action ( a , pop ), and a specific campaign or user ID ( 152549 ).

In short, you are likely looking at a "footprint" left by an automated redirecting through a service to ensure the content is served over a secure connection.

: This is a known domain often used for ad tracking or analytics redirect services.

: This is a standard HTTP request header that tells a server the browser prefers an encrypted (HTTPS) connection and can automatically "upgrade" insecure links to secure ones.