This connection was secured using TLS/SSL for 'myasnoy-dvorik.ru'
The HTTP request specified 'Host: myasnoy-dvorik.ru.', which is (obviously) different.
Because this looks like a domain fronting attack, the connection has been terminated.