rutor.is/torrent/933892e
7.3 kB IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (660), with CRLF, LF line terminators
Hash 688d27e52b6b47d7eaae168317ab4899
2f6f984c6526884c936069557c3434e232bb544c
75ef2aaac80ae85eb9c80466c0c5cdd7e6d1a08169b16bf9778693dafb8ae5be
GET /torrent/933892e HTTP/1.1
Host: rutor.is
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.22.1
Date: Tue, 07 May 2024 15:18:40 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 7316
Connection: keep-alive
Content-Encoding: gzip
Age: 9775
Accept-Ranges: bytes
X-Debug: 14400.000 14 v
ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
25 kB URL ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
IP
File type JavaScript source, ASCII text, with very long lines (820)
Hash 10092eee563dec2dca82b77d2cf5a1ae
65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b
e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 02:46:27 GMT
expires: Fri, 02 May 2025 02:46:27 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 477133
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
receivedachest.com/services/?id=144655
1.9 kB URL receivedachest.com/services/?id=144655
IP
ASN #6681 Giveme Cloud Sp Z O O
File type JavaScript source, ASCII text, with very long lines (1894), with no line terminators
Hash ca0773db922451e1b2449f2d84159f32
1544699f977511d067e0c568efb186094c11ec2f
0cd36846d8c3e265be5e9ca4b608d1c958866b8b47679e91f1f547de55ccd471
GET /services/?id=144655 HTTP/1.1
Host: receivedachest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:18:40 GMT
Content-Type: text/javascript; charset=utf-8
Content-Length: 1894
Connection: keep-alive
cdnbunny.org/jquery.cookie-min.js
732 B URL cdnbunny.org/jquery.cookie-min.js
IP
ASN #44477 Stark Industries Solutions Ltd
File type JavaScript source, ASCII text, with very long lines (732), with no line terminators
Hash ce56bb0d2daafc993b2866ccc1af86fc
fe46733587f81da245f6b3e16d6bbbd8a1cb2fea
874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /jquery.cookie-min.js HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:40 GMT
Content-Type: application/javascript
Content-Length: 732
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 17:05:24 GMT
ETag: "4ebea754-2dc"
Cache-Control: max-age=604800
Age: 461484
X-Debug: 604800.000 1569273
Accept-Ranges: bytes
cdnbunny.org/t/functions.js
3.9 kB URL cdnbunny.org/t/functions.js
IP
ASN #44477 Stark Industries Solutions Ltd
File type Unicode text, UTF-8 text, with very long lines (318)
Hash acee02196e40649c575ccf4848b623d8
152193c0a635fdd111253397d32f52392bcf8c52
c787a40d68005890630932870e5b79587360d9eb1c2a4c0323ed5da897690801
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /t/functions.js HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:40 GMT
Content-Type: application/javascript
Content-Length: 3862
Connection: keep-alive
Last-Modified: Wed, 06 Jan 2016 14:43:48 GMT
ETag: "568d2824-f16"
Cache-Control: max-age=604800
Age: 461484
X-Debug: 604800.000 1546829
Accept-Ranges: bytes
cdnbunny.org/css.css
24 kB IP
ASN #44477 Stark Industries Solutions Ltd
File type ASCII text, with very long lines (3877), with CRLF line terminators
Hash 751ab231b9980ced48191df03db9999a
36bd22d3521f2dfd5530d74796082fc276160c99
581b656ce90c82bb602f30470c75abbd2eb9d68d26cfc8f2d7a975f0ca0675a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css.css HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:40 GMT
Content-Type: text/css
Content-Length: 23547
Connection: keep-alive
Last-Modified: Sun, 17 May 2015 18:55:35 GMT
ETag: "5558e427-5bfb"
Cache-Control: max-age=604800
Age: 461484
X-Debug: 604800.000 1541195
Accept-Ranges: bytes
i122.fastpic.org/big/2023/0713/63/d6243c7e30d5a99a36862d1d7ccb9e63.jpg
47 kB URL i122.fastpic.org/big/2023/0713/63/d6243c7e30d5a99a36862d1d7ccb9e63.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", progressive, precision 8, 400x400, components 3
Hash 24bc3a1549169b02ca4146d676221b1f
a9548985b9b3ae392ffa2db226d6b55b5ddd6221
3c7d1c718f0663c347e381d066de0d94b8b5628c26c324cee349912a0dd9a9c5
GET /big/2023/0713/63/d6243c7e30d5a99a36862d1d7ccb9e63.jpg HTTP/1.1
Host: i122.fastpic.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0 (Ubuntu)
date: Tue, 07 May 2024 15:18:40 GMT
content-type: image/jpeg
content-length: 47339
last-modified: Thu, 13 Jul 2023 17:38:47 GMT
etag: "64b036a7-b8eb"
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: https://fastpic.org
accept-ranges: bytes
X-Firefox-Spdy: h2
cdnbunny.org/i/lupa.gif
3.1 kB IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 55 x 56
Hash e2c8f8537818f7880be3ae505852b9ff
2a1f5572e6f4c9efc1700f34d6c6969bedbd8535
6946c64a41b61a1e8708b7bcf8274274c71cdc23932aab32da5b868d19212b3a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/lupa.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 3079
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:36 GMT
ETag: "4ebe90a4-c07"
Cache-Control: max-age=604800
Age: 461481
X-Debug: 604800.000 1438915
Accept-Ranges: bytes
cdnbunny.org/t/down.png
4.6 kB IP
ASN #44477 Stark Industries Solutions Ltd
File type PNG image data, 27 x 27, 8-bit/color RGBA, interlaced
Hash 7c13d91e67d4debe5cc1469495197d9d
e58a04673dd493302d7e6f1198b68ffdce39ebc2
d2e05bd0c1f904da109ba2558bcc76c84c48e3de9a2cece178ceba790c6d2bb4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /t/down.png HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/png
Content-Length: 4603
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:31:05 GMT
ETag: "4ebe9139-11fb"
Cache-Control: max-age=604800
Age: 461484
X-Debug: 604800.000 968935
Accept-Ranges: bytes
cdnbunny.org/i/m.png
656 B IP
ASN #44477 Stark Industries Solutions Ltd
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced
Hash 1c923e4247dd2fbbc7e407beecf6028c
37a7cd424c135206071cad59df92511df4fb6e5e
efb2d84b9882f1e58d07b358cb77ad0b67fcce154bc7dc70086532abe8f57fff
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/m.png HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/png
Content-Length: 656
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:36 GMT
ETag: "4ebe90a4-290"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 1642842
Accept-Ranges: bytes
cdnbunny.org/i/d.gif
359 B IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 13 x 13
Hash 3def66024a583b6ca763e249acb3c426
82f2f897d3e2746181b889811ac675565dcaf0fa
7d4fb7d5a9e681b2313ca88338e3255364aa452f243d6397aa905783e98bfca0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/d.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 359
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:29 GMT
ETag: "4ebe909d-167"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 1670001
Accept-Ranges: bytes
cdnbunny.org/t/top.gif
612 B IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 24 x 24
Hash ab3755cddb40723270164fa84b8f0362
a7e6700d02578c03bd76b217b23c55b4fba997ea
79df9f5b18cac4dbaec0808448c15e094b5fe20d04aabfe7bed9e6ae07739dfd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /t/top.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 612
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:31:17 GMT
ETag: "4ebe9145-264"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 1440088
Accept-Ranges: bytes
cdnbunny.org/i/magnet.gif
796 B URL cdnbunny.org/i/magnet.gif
IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 30 x 30
Hash 1a31398a96af2ae3e63de5055912daec
55d558e163c634baeae650b15000f513753f29a8
7c92fab95800728d3ab74659b56bdc267928496ec422f03954679ebe0155cf9a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/magnet.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 796
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:27 GMT
ETag: "4ebe909b-31c"
Cache-Control: max-age=604800
Age: 461484
X-Debug: 604800.000 967720
Accept-Ranges: bytes
cdnbunny.org/t/arrowup.gif
200 OK 52 B URL GET HTTP/1.1 cdnbunny.org/t/arrowup.gif
IP
ASN #44477 Stark Industries Solutions Ltd
Requested by https://rutor.is/torrent/933892e
Certificate IssuerLet's Encrypt
Subjectcdnbunny.org
Fingerprint5F:3F:E5:94:94:38:04:8B:81:0D:0A:70:32:1E:E0:2C:DF:22:2A:62
ValidityWed, 13 Mar 2024 06:51:34 GMT - Tue, 11 Jun 2024 06:51:33 GMT
File type GIF image data, version 89a, 5 x 8
Hash 7cbfc089fd0b0d261187a0c1ef0826af
1583fd0ccdd6a7dcb24ef670761ab01387cf87cf
b88cfd011c972f65586f207621005b8b3336773a252e2a309ddbd9b7dda7b8b9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /t/arrowup.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 52
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:30:59 GMT
ETag: "4ebe9133-34"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 1615993
Accept-Ranges: bytes
cdnbunny.org/i/forum.gif
4.4 kB IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 250 x 42
Hash 48ae00889ff3baa47dafe9d6d0977019
8c08f0f6ee7fd93f40679bea8d3ceb7be01b3e2c
790a5e6e4ff054d64eca66bd8cfe77b7f379695366e3e5f1f35d5b702e39506c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/forum.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 4367
Connection: keep-alive
Last-Modified: Sun, 03 Jan 2016 20:49:57 GMT
ETag: "56898975-110f"
Cache-Control: max-age=604800
Age: 461483
X-Debug: 604800.000 1440163
Accept-Ranges: bytes
cdnbunny.org/t/arrowdown.gif
51 B URL cdnbunny.org/t/arrowdown.gif
IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 5 x 8
Hash fe98a58fe6509fb7cb897d25228329d3
34d9e63fe61d4b543f84003c70d0473b6893926f
a045e7b1f5ceaefbab2ef782b86b12de0a41fc2ca34c43cbf6b8b8a107d339ff
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /t/arrowdown.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 51
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:30:58 GMT
ETag: "4ebe9132-33"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 1576049
Accept-Ranges: bytes
cdnbunny.org/i/com.gif
295 B IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 11 x 9
Hash e91f48c29a8f6285ade898585e58f8ad
c171b970bbdb33210c1e9714bc7fa96e42bdb0bf
30bacf9c5db02b0b5fdbe670c15301ec8231d2e526ab20ea5f8dfb8692e02f17
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/com.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 295
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:29 GMT
ETag: "4ebe909d-127"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 1519610
Accept-Ranges: bytes
cdnbunny.org/logo.jpg
45 kB IP
ASN #44477 Stark Industries Solutions Ltd
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=120, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=450], baseline, precision 8, 420x110, components 3
Hash dc4a948f3ccf35b2c39269cde1aad6f3
1b952aa88121ee56b0648e0e2476a0dacc39da5e
eabb9097a448d6066ceac9b449f2a3759776e14aea3d574208495af12ed84f56
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /logo.jpg HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/jpeg
Content-Length: 44893
Connection: keep-alive
Last-Modified: Wed, 23 Jan 2019 21:57:36 GMT
ETag: "5c48e350-af5d"
Cache-Control: max-age=604800
Age: 461480
X-Debug: 604800.000 1472028
Accept-Ranges: bytes
cdnbunny.org/i/poisk_bg.gif
2.0 kB URL cdnbunny.org/i/poisk_bg.gif
IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 46 x 56
Hash 76118a48fd5ae4b926e34f4edb427386
4aa5f228e3f511bf626afa6703488d1d7c6df5e0
4912841156c4582948d016867a6c71845a0221f1dd6419ea911f6f83bbc431d7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/poisk_bg.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 1998
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:37 GMT
ETag: "4ebe90a5-7ce"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 875686
Accept-Ranges: bytes
cdnbunny.org/i/zaiti.gif
3.1 kB IP
ASN #44477 Stark Industries Solutions Ltd
File type GIF image data, version 89a, 99 x 30
Hash 9815ec4cdd376b7d71df61b74a7ce6c6
962c557ce627cc0332bc6ee175914946ff4bd2a1
a1d3e2383ecd387242844341a7200834f5cf3517ab846f17d276a2adc0286421
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /i/zaiti.gif HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/gif
Content-Length: 3070
Connection: keep-alive
Last-Modified: Sat, 12 Nov 2011 15:28:40 GMT
ETag: "4ebe90a8-bfe"
Cache-Control: max-age=604800
Age: 461485
X-Debug: 604800.000 984014
Accept-Ranges: bytes
cdnbunny.org/favicon.ico
894 B IP
ASN #44477 Stark Industries Solutions Ltd
File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel
Hash ab55f59a775976829d8352a7a0584d3e
e4b29ec4ac46d97ea15c582d61d02c523dd0485b
e68d4b7f22b5027fef4672cc5ba884fb52ac248fd1ca4648c9ac89d95b0e58f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: cdnbunny.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: image/x-icon
Content-Length: 894
Connection: keep-alive
Last-Modified: Fri, 08 Feb 2013 21:57:36 GMT
ETag: "511574d0-37e"
Cache-Control: max-age=604800
Age: 461484
X-Debug: 604800.000 869553
Accept-Ranges: bytes
clpeachcod.com/bens/vinos.js?24105&u=null&a=0.18399591227636636
200 OK 78 kB URL GET HTTP/1.1 clpeachcod.com/bens/vinos.js?24105&u=null&a=0.18399591227636636
IP
ASN #6681 Giveme Cloud Sp Z O O
Requested by https://rutor.is/torrent/933892e
Certificate IssuerLet's Encrypt
Subjectclpeachcod.com
Fingerprint31:1D:EF:34:07:77:44:9A:22:DA:B5:D0:82:70:C6:D0:8A:31:E3:27
ValidityWed, 17 Apr 2024 11:34:05 GMT - Tue, 16 Jul 2024 11:34:04 GMT
File type JavaScript source, ASCII text, with very long lines (699)
Hash 3d43a4eac61dc21ccb927c00b4c5b1cc
52aeb799fb3a19e88380fb8e54e6fc96b52db128
da09bd34439c87ff6b9a7dbb6fd4663e7e632d1b8940058c67141adbdd26df97
GET /bens/vinos.js?24105&u=null&a=0.18399591227636636 HTTP/1.1
Host: clpeachcod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:18:41 GMT
Content-Type: text/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NON DSP COR CURa TIA"
Set-Cookie: uuid=17150951219457840171; expires=Thu, 07-May-2026 15:18:41 GMT; Max-Age=63072000; path=/; samesite=None; domain=.clpeachcod.com; secure
static.moviead55.ru/mp_dist/protect_trackmaster.js?v1715095121664
852 B URL static.moviead55.ru/mp_dist/protect_trackmaster.js?v1715095121664
IP
File type ASCII text, with very long lines (746), with no line terminators
Hash 0a58cfaf8b36ee0bda3d3b164589ab25
c98f8f9b230280b35c5b0634a5ca042c6ae5b179
8b9ed7c31e5a95c28722f4cfbf9f1a3b86626111d3b21b3d97dc4acc48d46be9
GET /mp_dist/protect_trackmaster.js?v1715095121664 HTTP/1.1
Host: static.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 15:18:41 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2024 13:20:31 GMT
vary: Accept-Encoding
etag: W/"6634e49f-2ea"
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cache-control: max-age=7200
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eFo2MucXjXR9r9NQ3%2F%2FDkrdKaxcddXxuJ2swyHW7%2F7PrOl3NcCM0d30qoZ7qaIDmv1IJssfUy444A2%2FVHDd%2FvT%2BW7K0MaPGfFc8FGIH1EEXTU8pwOLwALDFM2krS5DPo%2Fw8vwmxX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88022f1f2b2a56c3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=btwcookie&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=34348&callback_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbtwcookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=91d73826-18e1-b156-f406-c6d717746778; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=ohmybid&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=e857ff2d-70e7-e42e-e1ba-87b90a95c5f7; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=hbrdcookie2&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
set-cookie: sky_uuid=1aaab099-4821-52ef-80c3-f74594f4d8aa; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otmbid&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://sync.dmp.otm-r.com/match/skyadvert
set-cookie: sky_uuid=40e16f55-2678-cea0-0672-9f2d491d5129; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gonetbid&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://sync.gonet-ads.com/match/SkyAdvert?id=4968d1bd-da05-e9ec-58f9-6d082d508ce3
set-cookie: sky_uuid=4968d1bd-da05-e9ec-58f9-6d082d508ce3; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=bzcookie&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
set-cookie: sky_uuid=f54139d2-8de2-9aeb-e696-fbb41a49f970; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=solta&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=solta&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=solta&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://kimberlite.io/rtb/sync/skyadvert?u=106bd42b-0231-852e-eb6b-45f5b992c08c
set-cookie: sky_uuid=106bd42b-0231-852e-eb6b-45f5b992c08c; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gtnt&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://px.adhigh.net/p/cm/skyadvert?u=f4ea3eda-70f1-cb8c-3cf6-d4363ac911ea
set-cookie: sky_uuid=f4ea3eda-70f1-cb8c-3cf6-d4363ac911ea; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=dgm2&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://sync.opendsp.ru/match/MovieAds?id=ff704583-4aa7-f2f0-9fa3-b3c9b4097a9e
set-cookie: sky_uuid=ff704583-4aa7-f2f0-9fa3-b3c9b4097a9e; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otclkbid&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
set-cookie: sky_uuid=9043744a-313b-5c59-4608-93443cf17f69; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715095121
0 B URL code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715095121
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=sapecookie&rnd=1715095121 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://www.acint.net/rmatch?dp=167&euid=9543c5ba-4faa-c88f-fa76-17c59e0da17f&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
set-cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; max-age=157680000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
www.acint.net/mc/?dp=167
154 B IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /mc/?dp=167 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html
content-length: 154
location: /mc/?dp=167&tc=1
set-cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Tue, 07-May-24 15:28:42 GMT
aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=167&euid=9543c5ba-4faa-c88f-fa76-17c59e0da17f&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
154 B URL www.acint.net/rmatch?dp=167&euid=9543c5ba-4faa-c88f-fa76-17c59e0da17f&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=167&euid=9543c5ba-4faa-c88f-fa76-17c59e0da17f&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html
content-length: 154
location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
set-cookie: cSyncDp14v4=1715095122; expires=Thu, 06-Jun-24 15:18:42 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
0 B URL dm-eu.hybrid.ai/match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D
IP
ASN #200197 Hybrid Adtech Sp.z.o.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=185&burl=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dhbrdcookie2%26bid%3D%24%7BVID%7D HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=ffdac1fb1195a3d73043
set-cookie: vid=ffdac1fb1195a3d73043; Expires=Wed, 07 May 2025 15:18:42 GMT; Domain=.hybrid.ai; Path=/; SameSite=None; Secure
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 573
x-xss-protection: 1; mode=block
access-control-allow-origin: https://rutor.is
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
user91471.clients-cdnnow.ru/yasdk/vw.js?v3
1.4 kB URL user91471.clients-cdnnow.ru/yasdk/vw.js?v3
IP
File type JavaScript source, ASCII text
Hash 9c70c316340d8c7c6c397d1e3344f9dc
a79cad66ca62f533d5792c65bac6fccd16a4b78c
26599212888d9e8ecbf08d3d8e896da191d9a2adedb63e9842fede94a6febf49
GET /yasdk/vw.js?v3 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: application/javascript
last-modified: Fri, 21 Jul 2023 13:34:19 GMT
vary: Accept-Encoding
etag: W/"64ba895b-12fc"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.3
X-Firefox-Spdy: h2
otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
124 B URL otclick-adv.ru/core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash c73e35f73ed5c795c70cf66e99088b7c
63a9ffe5d0e5b4070819b95ef564a58d8a3a3a1c
80034a9712f07e6b0577c7e5bf6d5d718736593e7d21c81dd1a3cbdb4eb860de
GET /core/match.gif?s=30&reference=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dotclkbid%26bid%3D%23%7BUID%7D HTTP/1.1
Host: otclick-adv.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.24.0
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 124
location: https://code.moviead55.ru/go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf
p3p: policyref=/w3c/p3p.xml, CP=NON CUR ADM DEV PSA PSD OUR IND UNI NAV INT STA
cache-control: no-cache, max-age=0, must-revalidate, no-store
pragma: no-cache
expires: Thursday, 01-Jan-1970 00:00:00 GMT
set-cookie: idntfy=VU0cO9fZFTbYzyf; expires=Fri, 05-May-2034 15:18:42 GMT; domain=otclick-adv.ru; path=/core; SameSite=None; Secure
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
0 B URL match.ohmy.bid/cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=skyadv&redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dohmybid%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 15:18:42 GMT
Content-Length: 0
Connection: keep-alive
Bidder: bid-28 1.1542.871fc768
Location: https://code.moviead55.ru/go/csync?cn=ohmybid&bid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d
Set-Cookie: uid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d.663a4652.43a82418dcf2c89c; domain=.ohmy.bid; path=/; expires=Thu, 06-Jun-2024 15:18:42 GMT; SameSite=None; Secure;
Access-Control-Allow-Credentials: true
code.moviead55.ru/go/bn?key=ea59f7a89d04d570fbb4ef98a8a1693c&cp.adsource=Infin_inf_br&vt=100&w=300&h=250&cp.referer=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&fid=e94791355aa23dac&cp.tanc=
572 B URL code.moviead55.ru/go/bn?key=ea59f7a89d04d570fbb4ef98a8a1693c&cp.adsource=Infin_inf_br&vt=100&w=300&h=250&cp.referer=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&fid=e94791355aa23dac&cp.tanc=
IP
ASN #6681 Giveme Cloud Sp Z O O
File type gzip compressed data, from Unix
Hash 80cdc2e3b066ea658967d0b4c63941dc
ffa8562719ac8c94600df52b418755d4ea1e0e69
57b7f2196b9f39aeebb653204f58cd2be44c3e8cc3fa2b3a07bfa43fe09c84f6
GET /go/bn?key=ea59f7a89d04d570fbb4ef98a8a1693c&cp.adsource=Infin_inf_br&vt=100&w=300&h=250&cp.referer=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&fid=e94791355aa23dac&cp.tanc= HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-path: /
x-movieads-referrer: https://rutor.is/
access-control-allow-credentials: true
access-control-allow-origin: https://rutor.is
x-movieads-udata: cache,parsed,354627
x-cache-source: Rist
x-movieads-mrc: no
x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"rutor.is","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""}
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
sync.opendsp.ru/match/MovieAds?id=ff704583-4aa7-f2f0-9fa3-b3c9b4097a9e
43 B URL sync.opendsp.ru/match/MovieAds?id=ff704583-4aa7-f2f0-9fa3-b3c9b4097a9e
IP
ASN #50340 OOO Network of data-centers Selectel
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/MovieAds?id=ff704583-4aa7-f2f0-9fa3-b3c9b4097a9e HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
114 B URL exchange.buzzoola.com/cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 088833a6fbda83cf2eb9b8ab07aadfb7
b31611faf7eda2e5b03dafa1067c5494a2b1e357
aefa72412f9253796b68a12b7cd4ad14ef61ccec3bd14dd225162ca971462ea9
GET /cookiesync/redirect/skyadvert?redirect_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbzcookie%26bid%3D%24%7BUUID%7D HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html; charset=utf-8
content-length: 114
location: https://code.moviead55.ru/go/csync?cn=bzcookie&bid=1b1f458a-2975-4ba4-77aa-033abb4bcf76
serverid: TODO
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=ffdac1fb1195a3d73043
0 B URL code.moviead55.ru/go/csync?cn=hbrdcookie2&bid=ffdac1fb1195a3d73043
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=hbrdcookie2&bid=ffdac1fb1195a3d73043 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/jpeg
content-length: 0
set-cookie: hbrdcookie2=ffdac1fb1195a3d73043; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf
0 B URL code.moviead55.ru/go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=otclkbid&bid=VU0cO9fZFTbYzyf HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/jpeg
content-length: 0
set-cookie: otclkbid=VU0cO9fZFTbYzyf; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=ohmybid&bid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d
0 B URL code.moviead55.ru/go/csync?cn=ohmybid&bid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=ohmybid&bid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/jpeg
content-length: 0
set-cookie: ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14
142 B URL ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcode.moviead55.ru%252Fgo%252Fcsync%253Fcn%253Dsapecookie%2526bid%253D%2524%257BUSER_ID%257D&dp=14 HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 07 May 2024 15:18:42 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/rmatch?dp=14&euid=1A03420A52463A6621002B4B02CFF18F&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Set-Cookie: sspuid=CkIDGmY6RlJLKwAhj/HPAisCyfGJY+Swh7Yr41kRi1Brgafw; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None
kimberlite.io/rtb/sync/skyadvert?u=106bd42b-0231-852e-eb6b-45f5b992c08c
0 B URL kimberlite.io/rtb/sync/skyadvert?u=106bd42b-0231-852e-eb6b-45f5b992c08c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/skyadvert?u=106bd42b-0231-852e-eb6b-45f5b992c08c HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 07 May 2024 15:18:42 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: u=ZjpGUp7irjs~5DHwFV0oRTz0qPUS9OMDCwmar00; path=/; max-age=7776000; samesite=none; httponly; secure
as=hPJ_CGY6RlI; max-age=604800; samesite=none; httponly; secure
f=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsolta%26bid%3DZjpGUp7irjs; max-age=30; samesite=none; httponly; secure
n=1; max-age=30; samesite=none; httponly; secure
location: https://sync.dsp.solta.io/match/kimberlite?id=ZjpGUp7irjs
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0002
sync.gonet-ads.com/match/SkyAdvert?id=4968d1bd-da05-e9ec-58f9-6d082d508ce3
43 B URL sync.gonet-ads.com/match/SkyAdvert?id=4968d1bd-da05-e9ec-58f9-6d082d508ce3
IP
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/SkyAdvert?id=4968d1bd-da05-e9ec-58f9-6d082d508ce3 HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
dm-eu.hybrid.ai/match?id=106&vid=0500007F52463A665236996E020532BB
0 B URL dm-eu.hybrid.ai/match?id=106&vid=0500007F52463A665236996E020532BB
IP
ASN #200197 Hybrid Adtech Sp.z.o.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match?id=106&vid=0500007F52463A665236996E020532BB HTTP/1.1
Host: dm-eu.hybrid.ai
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: vid=ffdac1fb1195a3d73043
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
cache-control: no-cache, no-store
pragma: no-cache
expires: -1
location: https://an.yandex.ru/mapuid/targetixis/ffdac1fb1195a3d73043
p3p: CP="NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC"
x-mode: 546
x-xss-protection: 1; mode=block
access-control-allow-origin: https://www.acint.net
access-control-allow-credentials: true
server: Hybrid Web Server
X-Firefox-Spdy: h2
ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
142 B URL ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 82c98e8e012b79c922655461171cc2fa
0828d79135573276005b04be42d79a8a3291292b
745173bcc5c57ce9751dd019606e877e0aae13b60372fdb090f3db0470c3a43c
GET /rmatch/?r=https%3A%2F%2Facint.net%2Fmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: ssp-rtb.sape.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: sspuid=CkIDGmY6RlJLKwAhj/HPAisCyfGJY+Swh7Yr41kRi1Brgafw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: openresty
Date: Tue, 07 May 2024 15:18:42 GMT
Content-Type: text/html
Content-Length: 142
Connection: keep-alive
P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Location: https://acint.net/match?dp=14&euid=1A03420A52463A6621002B4B02CFF18F
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126
269 B URL exchange.buzzoola.com/cookiesync/dsp/sape-banner?uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash d67c898d2696334b62b22ae8b15ae405
39e64acc91d33a59f4652bfcc15274402bd17298
3e03916b06362c7bf3ee1254613b72872a21d7c7dafd9220931e8b9583f89e49
GET /cookiesync/dsp/sape-banner?uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 307 Temporary Redirect
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html; charset=utf-8
content-length: 269
location: /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126
set-cookie: uuid=4d902f13-e2d0-4c9f-632c-d1830860f089; Path=/; Domain=buzzoola.com; Expires=Thu, 06 Jun 2024 15:18:42 GMT; Max-Age=2592000; Secure; SameSite=None
serverid: TODO
X-Firefox-Spdy: h2
sync.gonet-ads.com/match/sape.js?id=0500007F52463A665236996E020532BB
43 B URL sync.gonet-ads.com/match/sape.js?id=0500007F52463A665236996E020532BB
IP
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape.js?id=0500007F52463A665236996E020532BB HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
a.utraff.com/sync?ssp=8&id=0500007F52463A665236996E020532BB
0 B URL a.utraff.com/sync?ssp=8&id=0500007F52463A665236996E020532BB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync?ssp=8&id=0500007F52463A665236996E020532BB HTTP/1.1
Host: a.utraff.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/plain
set-cookie: preutid=1; Expires=Thu, 06 Jun 2024 18:18:42 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/
preutid=1; Expires=Thu, 06 Jun 2024 18:18:42 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: Content-Length,Content-Range
vary: Origin
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VpjkeQZNFraX4gsBPaZXNkH56lEOcnZ4iiR%2BrSc7kZxNGsuBfGuRkguP61H8TeAfnCYaChZJtcP8WkyiciVwyG1KgvzuWcqIZ5kdT3G92VvU2kpJ05zaTSEfPGiU1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88022f252d28b4f3-OSL
X-Firefox-Spdy: h2
sync.opendsp.ru/match/sape_ex?id=0500007F52463A665236996E020532BB
43 B URL sync.opendsp.ru/match/sape_ex?id=0500007F52463A665236996E020532BB
IP
ASN #50340 OOO Network of data-centers Selectel
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape_ex?id=0500007F52463A665236996E020532BB HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/skyadvert
61 B URL sync.dmp.otm-r.com/match/skyadvert
IP
File type HTML document, ASCII text
Hash 64c205b6c4808291b8ba0ec52f8afe6f
fafdc7a247c9522f32b4f7c64e12dbdbfad70adc
75a5b48d0ea51e2bd7c78d5f5009341b3994a31af973718889c832a4cf0a330c
GET /match/skyadvert HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html; charset=utf-8
content-length: 61
access-control-allow-origin: *
location: /match/skyadvert?otcm_check=1715095122
set-cookie: mpid=NjYzYTQ2NTIwOGJmYzM0Mg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
0 B URL match.ohmy.bid/cm?ssp=sape&redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?ssp=sape&redirect_url=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D217%26euid%3D%7Buid%7D HTTP/1.1
Host: match.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: uid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d.663a4652.43a82418dcf2c89c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 15:18:42 GMT
Content-Length: 0
Connection: keep-alive
Bidder: bid-24 1.1542.871fc768
Location: https://mc.acint.net/match?dp=217&euid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d
Access-Control-Allow-Credentials: true
code.moviead55.ru/go/csync?cn=bzcookie&bid=1b1f458a-2975-4ba4-77aa-033abb4bcf76
0 B URL code.moviead55.ru/go/csync?cn=bzcookie&bid=1b1f458a-2975-4ba4-77aa-033abb4bcf76
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=bzcookie&bid=1b1f458a-2975-4ba4-77aa-033abb4bcf76 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:42 GMT
content-type: image/jpeg
content-length: 0
set-cookie: bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=0500007F52463A665236996E020532BB
96 B URL sync.dmp.otm-r.com/match/sape?id=0500007F52463A665236996E020532BB
IP
File type HTML document, ASCII text
Hash a73b96af2f4be5e473f63b481cd6e5df
f2749e97f74f04d7fd2175817630097f04d38171
85af8edf3c9513716597beeb6f7797fc77889a8d7771c232524a51de6cf92748
GET /match/sape?id=0500007F52463A665236996E020532BB HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html; charset=utf-8
content-length: 96
access-control-allow-origin: *
location: /match/sape?id=0500007F52463A665236996E020532BB&otcm_check=1715095122
set-cookie: mpid=NjYzYTQ2NTIwOGJmYzQwMg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
static.moviead55.ru/mp_dist/mstream2.js?v6774352230
54 kB URL static.moviead55.ru/mp_dist/mstream2.js?v6774352230
IP
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65085), with no line terminators
Hash 1946f94d6622595c6ac00d5005da56a4
0d54204996245fcb44ead6c694efaa7b04aa4a75
68307b7681a56cdfe3e1907e69595972d311331ea67f459ab06ae092b02042d6
GET /mp_dist/mstream2.js?v6774352230 HTTP/1.1
Host: static.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 15:18:42 GMT
content-type: application/javascript
last-modified: Fri, 03 May 2024 13:20:31 GMT
vary: Accept-Encoding
etag: W/"6634e49f-26e80"
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cache-control: max-age=7200
cf-cache-status: HIT
age: 7040
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ObIMLxJAwN8FkTK3ApzN%2Fy%2BZcq68xY14ONsVHVA2jYpVCP7AwyHYQw6ZCBkSRnpb26EE13Ijznr8kyC0jSVxVmjOLIzg%2FNRcNP%2BVtIEUkY5EMwZEgoXOv6IxZj3lxh0lM8BwOOVq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88022f20ac60b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
kimberlite.io/rtb/sync/sape2?u=0500007F52463A665236996E020532BB
0 B URL kimberlite.io/rtb/sync/sape2?u=0500007F52463A665236996E020532BB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/sape2?u=0500007F52463A665236996E020532BB HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Cookie: as=hPJ_CGY6RlI; f=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsolta%26bid%3DZjpGUp7irjs; n=1; u=ZjpGUp7irjs~5DHwFV0oRTz0qPUS9OMDCwmar00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 07 May 2024 15:18:42 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: as=-WrUeGY6RlKE8n8IZjpGUg; max-age=604800; samesite=none; httponly; secure
n=2; max-age=30; samesite=none; httponly; secure
location: https://solta-sync.rutarget.ru/sync
referrer-policy: no-referrer
server-timing: app;srv=13;dur=0.0002
acint.net/rmatch?dp=14&euid=1A03420A52463A6621002B4B02CFF18F&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
154 B URL acint.net/rmatch?dp=14&euid=1A03420A52463A6621002B4B02CFF18F&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=14&euid=1A03420A52463A6621002B4B02CFF18F&r=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsapecookie%26bid%3D%24%7BUSER_ID%7D HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html
content-length: 154
location: https://code.moviead55.ru/go/csync?cn=sapecookie&bid=0500007F52463A665236996E020532BB
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
s.uuidksinc.net/match/396/?remote_uid=0500007F52463A665236996E020532BB
0 B URL s.uuidksinc.net/match/396/?remote_uid=0500007F52463A665236996E020532BB
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /match/396/?remote_uid=0500007F52463A665236996E020532BB HTTP/1.1
Host: s.uuidksinc.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 15:18:42 GMT
content-length: 0
location: https://www.acint.net/match?dp=127&euid=pd2QOp6yyC7Rt079kN92
set-cookie: jcsuuid=pd2QOp6yyC7Rt079kN92; expires=Wed, 07 May 2025 15:18:42 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&uid=0500007F52463A665236996E020532BB
0 B URL sync.bumlam.com/?src=sap1&uid=0500007F52463A665236996E020532BB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&uid=0500007F52463A665236996E020532BB HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 07 May 2024 15:18:42 GMT
Content-Length: 0
Connection: close
Set-Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 02 May 2044 15:18:42 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: //sync.bumlam.com/?src=sap1&s_data=CAIQARjSjOmxBmIgMDUwMDAwN0Y1MjQ2M0E2NjUyMzY5OTZFMDIwNTMyQkKiARAXGNpGDIUR74bgACWQwGR8
ETag: 1718da46-0c85-11ef-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
pix.bumlam.com/sync/sape/check?sspuid=0500007F52463A665236996E020532BB
0 B URL pix.bumlam.com/sync/sape/check?sspuid=0500007F52463A665236996E020532BB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/check?sspuid=0500007F52463A665236996E020532BB HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://sync.bumlam.com/?src=sape
acint.net/match?dp=14&euid=1A03420A52463A6621002B4B02CFF18F
43 B URL acint.net/match?dp=14&euid=1A03420A52463A6621002B4B02CFF18F
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=14&euid=1A03420A52463A6621002B4B02CFF18F HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
exchange.buzzoola.com/cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126
156 B URL exchange.buzzoola.com/cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text
Hash 3a88fac537e7a0a1a65baac596925706
82bc0cca71fd9125910fc9d5ddf3cb31341e165b
43ce034a62703ab77f524122a7553d57e2c8a62e83627b1038a889cd3ed37733
GET /cookiesync/dsp/sape-banner?set_buzzoola_cookie=t&uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D126%26euid%3D%24%7BUUID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D126 HTTP/1.1
Host: exchange.buzzoola.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: uuid=4d902f13-e2d0-4c9f-632c-d1830860f089
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html; charset=utf-8
content-length: 156
location: https://mc.acint.net/rmatch?dp=126&euid=4d902f13-e2d0-4c9f-632c-d1830860f089&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126
serverid: TODO
X-Firefox-Spdy: h2
match.new-programmatic.com/userbind?src=sape&id=0500007F52463A665236996E020532BB
0 B URL match.new-programmatic.com/userbind?src=sape&id=0500007F52463A665236996E020532BB
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0500007F52463A665236996E020532BB HTTP/1.1
Host: match.new-programmatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
nr.bidderstack.com/sape/cm?user_id=0500007F52463A665236996E020532BB
0 B URL nr.bidderstack.com/sape/cm?user_id=0500007F52463A665236996E020532BB
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0500007F52463A665236996E020532BB HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Length: 0
Connection: keep-alive
Location: /sape/cm?user_id=0500007F52463A665236996E020532BB&pupa=1
Set-Cookie: pupa=3a0334ba-9589-962c-038b-b3f73975490b; domain=.bidderstack.com; path=/; expires=Wed, 07-May-2025 15:18:43 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
sync.adspend.space/sape?uid=0500007F52463A665236996E020532BB
652 B URL sync.adspend.space/sape?uid=0500007F52463A665236996E020532BB
IP
Hash be48a1548afdd51bbf8817a442b65f49
f4e0bcc476b4f921d5e78fc486470879940ee3ad
4340c19a5b8b392b2de85437e73773b494c2390d564019367f01fd0c8f77c495
GET /sape?uid=0500007F52463A665236996E020532BB HTTP/1.1
Host: sync.adspend.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 15:18:42 GMT
content-type: text/html; charset=utf-8
location: https://sync.adspend.space/check?r=https%3A%2F%2Fwww.acint.net%2Fmatch%3Fdp%3D98%26euid%3Dcb8440f6-059f-4a55-8ab7-c725abf5e34d
set-cookie: as-user=cb8440f6-059f-4a55-8ab7-c725abf5e34d; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e4%2FiXNzcCuBvwmuJhMg8ZG%2B5wlZtibe3ncnWXDT4a5UmfqAVlEt5LkfXI7iPkVKEZyg8s1JEbnIHMf%2BaiswKfIHLbX0AZIRnwdTZqm0VVOOLabIO5clwYZ2FK718Pfq%2FZI9fAbI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88022f253a4356cb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/skyadvert?otcm_check=1715095122
104 B URL sync.dmp.otm-r.com/match/skyadvert?otcm_check=1715095122
IP
File type HTML document, ASCII text
Hash fe7a9a78ed4b89dcac9d5c84d7be5ebd
ec60e86579002c33ba93b2c6d44c25d3a6f0a271
77ce4ccef44d5bd5479374af4e7cdb4192e58bb7e6cc20aa0c0b9c511acb68ae
GET /match/skyadvert?otcm_check=1715095122 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: mpid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html; charset=utf-8
content-length: 104
access-control-allow-origin: *
location: https://code.moviead55.ru/go/csync?cn=otmbid&bid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D
set-cookie: mpid=NjYzYTQ2NTIwOGJmYzQwMg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
mc.acint.net/match?dp=217&euid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d
43 B URL mc.acint.net/match?dp=217&euid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=217&euid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D
126 B URL ssp.bestssp.com/sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D
IP
File type HTML document, ASCII text
Hash 67aa2e845978333804057b9a57d4a401
0fceba8bd7a104556f5b3ec0a0fd0af93380cae2
efccff5ef6a14fa2072cd660cfb5897cc48adc8dd77b0034e3f6698b8f85ed5f
GET /sspmatch?url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D95%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D95%26euid%3D HTTP/1.1
Host: ssp.bestssp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html; charset=utf-8
content-length: 126
location: https://mc.acint.net/rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=OVUNQLEZ
set-cookie: uid=OVUNQLEZ; Expires=Fri, 05 May 2034 15:18:43 GMT
X-Firefox-Spdy: h2
mc.acint.net/rmatch?dp=110&euid=2a11874c0e0d42219a2583947d9fdb1f&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110
154 B URL mc.acint.net/rmatch?dp=110&euid=2a11874c0e0d42219a2583947d9fdb1f&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=110&euid=2a11874c0e0d42219a2583947d9fdb1f&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=110
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
ads.adlook.me/csync?pid=sape&uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D110%26euid%3D%7BuserId%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D110
0 B URL ads.adlook.me/csync?pid=sape&uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D110%26euid%3D%7BuserId%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D110
IP
ASN #209974 Itglobalcom Rus LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /csync?pid=sape&uid=0500007F52463A665236996E020532BB&url=https%3A%2F%2Fmc.acint.net%2Frmatch%3Fdp%3D110%26euid%3D%7BuserId%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D110 HTTP/1.1
Host: ads.adlook.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://mc.acint.net/rmatch?dp=110&euid=2a11874c0e0d42219a2583947d9fdb1f&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D110
server: Microsoft-IIS/10.0
set-cookie: adlm_userId=2a11874c0e0d42219a2583947d9fdb1f; expires=Tue, 06 May 2025 21:00:00 GMT; path=/; SameSite=None; secure; samesite=none
adlk_cmatch=sape%3A0500007F52463A665236996E020532BB; expires=Fri, 31 Dec 9999 20:59:59 GMT; path=/; SameSite=None; secure; samesite=none
date: Tue, 07 May 2024 15:18:42 GMT
X-Firefox-Spdy: h2
sync.programmatica.com/match/01
43 B URL sync.programmatica.com/match/01
IP
ASN #200350 Yandex.Cloud LLC
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/01 HTTP/1.1
Host: sync.programmatica.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
sync.dmp.otm-r.com/match/sape?id=0500007F52463A665236996E020532BB&otcm_check=1715095122
94 B URL sync.dmp.otm-r.com/match/sape?id=0500007F52463A665236996E020532BB&otcm_check=1715095122
IP
File type HTML document, ASCII text
Hash 6df1b795040d131a9d2cfb95ebc2e187
24b8f6d06ef11d18d3c6cad1efab13f8caf9bc3f
22544226b8d7e2a4630ba3e389b8d1123f6494511fff4f3717b75b6e15ca22b4
GET /match/sape?id=0500007F52463A665236996E020532BB&otcm_check=1715095122 HTTP/1.1
Host: sync.dmp.otm-r.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: mpid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx/1.23.2
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html; charset=utf-8
content-length: 94
access-control-allow-origin: *
location: https://www.acint.net/match?dp=68&euid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D
set-cookie: mpid=NjYzYTQ2NTIwOGJmYzQwMg==; Path=/; Domain=otm-r.com; Max-Age=31536000; Secure; SameSite=None
X-Firefox-Spdy: h2
sync.dsp.solta.io/match/sape?id=0500007F52463A665236996E020532BB
43 B URL sync.dsp.solta.io/match/sape?id=0500007F52463A665236996E020532BB
IP
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/sape?id=0500007F52463A665236996E020532BB HTTP/1.1
Host: sync.dsp.solta.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=sapecookie&bid=0500007F52463A665236996E020532BB
0 B URL code.moviead55.ru/go/csync?cn=sapecookie&bid=0500007F52463A665236996E020532BB
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=sapecookie&bid=0500007F52463A665236996E020532BB HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/jpeg
content-length: 0
set-cookie: sapecookie=0500007F52463A665236996E020532BB; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.dsp.solta.io/match/kimberlite?id=ZjpGUp7irjs
43 B URL sync.dsp.solta.io/match/kimberlite?id=ZjpGUp7irjs
IP
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/kimberlite?id=ZjpGUp7irjs HTTP/1.1
Host: sync.dsp.solta.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
pixel.dsp.onetarget.ru/sape/pixel?id=0500007F52463A665236996E020532BB
0 B URL pixel.dsp.onetarget.ru/sape/pixel?id=0500007F52463A665236996E020532BB
IP
ASN #200350 Yandex.Cloud LLC
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/pixel?id=0500007F52463A665236996E020532BB HTTP/1.1
Host: pixel.dsp.onetarget.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 15:18:43 GMT
content-length: 0
location: https://x01.aidata.io/0.gif?pid=5813217&id=da8f8cdd-00b9-406f-a996-0df5d91f3abd
set-cookie: USER_ID=da8f8cdd-00b9-406f-a996-0df5d91f3abd;max-age=2147483647;Secure;HttpOnly;SameSite=None
SAPE_USER_ID=0500007F52463A665236996E020532BB;max-age=30758400;Secure;HttpOnly;SameSite=None
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
X-Firefox-Spdy: h2
www.acint.net/match?dp=127&euid=pd2QOp6yyC7Rt079kN92
43 B URL www.acint.net/match?dp=127&euid=pd2QOp6yyC7Rt079kN92
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=127&euid=pd2QOp6yyC7Rt079kN92 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
cs.agency2.ru/p?ssp=sp&uid=0500007F52463A665236996E020532BB
0 B URL cs.agency2.ru/p?ssp=sp&uid=0500007F52463A665236996E020532BB
IP
ASN #39134 Edinaya Set Limited Liability Company
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?ssp=sp&uid=0500007F52463A665236996E020532BB HTTP/1.1
Host: cs.agency2.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Length: 0
Connection: keep-alive
Server: fasthttp
Cache-Control: no-store, no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://www.acint.net/match?dp=186&euid=8af1a24d-4e42-4a1d-9034-6b081d880948
Set-Cookie: uuid=8af1a24d-4e42-4a1d-9034-6b081d880948; expires=Mon, 28 Apr 2025 15:18:43 GMT; domain=agency2.ru; path=/; secure; SameSite=None
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: authorization, Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT
X-Host: 23.111.107.44
ssp.al-adtech.com/api/sync/sape
0 B URL ssp.al-adtech.com/api/sync/sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/sync/sape HTTP/1.1
Host: ssp.al-adtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.20.1
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Length: 0
Connection: keep-alive
Vary: Origin
Access-Control-Allow-Origin:
Access-Control-Allow-Credentials: true
Location: https://mc.acint.net/rmatch?dp=261&euid=68971820-5675-44f9-9713-80a5ed08812c&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261
Set-Cookie: afp_cookie=gAAAAABmOkZTdGFR37c2BQi2rEsCpHZTNLGjTg2B7I4QHAyPZZp0QIRvtS_6npXF6L7aMzkXI8oox46K2H-KDbY0Aq6yh4K9R9IF21RYLO9_cxZEH3vgIiLKzWW9WXvB4TEuucmOOkX11GUnSzHZp4xc7na-Bv1DeRS8SuvNYTJrb9gd5NQADJMvHdoNkano6bnFTDN5KOEZhratbSuMV1Ymk2HlZD0zYg==$; expires=Fri, 07 Jun 2024 15:18:43 GMT; path=/; secure; SameSite=None
www.acint.net/match?dp=129&euid=hd9dl6pid9
43 B URL www.acint.net/match?dp=129&euid=hd9dl6pid9
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=129&euid=hd9dl6pid9 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
code.moviead55.ru/go/csync?cn=otmbid&bid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D
0 B URL code.moviead55.ru/go/csync?cn=otmbid&bid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/csync?cn=otmbid&bid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/jpeg
content-length: 0
set-cookie: otmbid=NjYzYTQ2NTIwOGJmYzQwMg==; max-age=86400; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sap1&s_data=CAIQARjSjOmxBmIgMDUwMDAwN0Y1MjQ2M0E2NjUyMzY5OTZFMDIwNTMyQkKiARAXGNpGDIUR74bgACWQwGR8
0 B URL sync.bumlam.com/?src=sap1&s_data=CAIQARjSjOmxBmIgMDUwMDAwN0Y1MjQ2M0E2NjUyMzY5OTZFMDIwNTMyQkKiARAXGNpGDIUR74bgACWQwGR8
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sap1&s_data=CAIQARjSjOmxBmIgMDUwMDAwN0Y1MjQ2M0E2NjUyMzY5OTZFMDIwNTMyQkKiARAXGNpGDIUR74bgACWQwGR8 HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Set-Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 02 May 2044 15:18:43 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
nr.bidderstack.com/sape/cm?user_id=0500007F52463A665236996E020532BB&pupa=1
0 B URL nr.bidderstack.com/sape/cm?user_id=0500007F52463A665236996E020532BB&pupa=1
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sape/cm?user_id=0500007F52463A665236996E020532BB&pupa=1 HTTP/1.1
Host: nr.bidderstack.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.acint.net/match?dp=251&euid=187da8a4-5e7b-8768-ed39-68cc113f0aec
Set-Cookie: pupa=187da8a4-5e7b-8768-ed39-68cc113f0aec; domain=.bidderstack.com; path=/; expires=Wed, 07-May-2025 15:18:43 GMT;
csorigin2=244; domain=.bidderstack.com; path=/; expires=Tue, 07-May-2024 15:23:43 GMT;
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
mc.acint.net/rmatch?dp=126&euid=4d902f13-e2d0-4c9f-632c-d1830860f089&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126
154 B URL mc.acint.net/rmatch?dp=126&euid=4d902f13-e2d0-4c9f-632c-d1830860f089&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=126&euid=4d902f13-e2d0-4c9f-632c-d1830860f089&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D126 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=126
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.acint.net/rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=OVUNQLEZ
154 B URL mc.acint.net/rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=OVUNQLEZ
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=95&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D95&euid=OVUNQLEZ HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=95
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.acint.net/cmatch?dp=110
154 B URL mc.acint.net/cmatch?dp=110
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=110 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://ads.betweendigital.com/match?bidder_id=73&external_user_id=0500007F52463A665236996E020532BB
set-cookie: cSyncDp7v3=1715095123; expires=Thu, 06-Jun-24 15:18:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/rmatch?dp=71&euid=8b714c4b-4536-47b4-bd77-2aa2294e868f&r=https%3A%2F%2Facint.net%2Fcmatch%3Fdp%3D71
154 B URL www.acint.net/rmatch?dp=71&euid=8b714c4b-4536-47b4-bd77-2aa2294e868f&r=https%3A%2F%2Facint.net%2Fcmatch%3Fdp%3D71
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=71&euid=8b714c4b-4536-47b4-bd77-2aa2294e868f&r=https%3A%2F%2Facint.net%2Fcmatch%3Fdp%3D71 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://acint.net/cmatch?dp=71
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=68&euid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D
43 B URL www.acint.net/match?dp=68&euid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=68&euid=NjYzYTQ2NTIwOGJmYzQwMg%3D%3D HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
www.acint.net/match?dp=98&euid=cb8440f6-059f-4a55-8ab7-c725abf5e34d
43 B URL www.acint.net/match?dp=98&euid=cb8440f6-059f-4a55-8ab7-c725abf5e34d
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=98&euid=cb8440f6-059f-4a55-8ab7-c725abf5e34d HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
sync.bumlam.com/?src=sape
0 B URL sync.bumlam.com/?src=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 0
Connection: close
Set-Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Mon, 02 May 2044 15:18:43 GMT; Domain=bumlam.com; SameSite=None; Secure
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Location: https://pix.bumlam.com/sync/sape/sync_ok?guid=1718da46-0c85-11ef-86e0-002590c0647c
Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
Access-Control-Allow-Origin: https://acint.net
Access-Control-Allow-Credentials: true
www.acint.net/match?dp=186&euid=8af1a24d-4e42-4a1d-9034-6b081d880948
43 B URL www.acint.net/match?dp=186&euid=8af1a24d-4e42-4a1d-9034-6b081d880948
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=186&euid=8af1a24d-4e42-4a1d-9034-6b081d880948 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.acint.net/rmatch?dp=261&euid=68971820-5675-44f9-9713-80a5ed08812c&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261
154 B URL mc.acint.net/rmatch?dp=261&euid=68971820-5675-44f9-9713-80a5ed08812c&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /rmatch?dp=261&euid=68971820-5675-44f9-9713-80a5ed08812c&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D261 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://mc.acint.net/cmatch?dp=261
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
gw-iad-bid.ymmobi.com/dsp/user/sync?dspid=c2FwZV9kc3A=&gdpr=0&gdpr_consent=0&us_privacy=0&callback=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D293%26euid%3D%7Bym_user_id%7D
0 B URL gw-iad-bid.ymmobi.com/dsp/user/sync?dspid=c2FwZV9kc3A=&gdpr=0&gdpr_consent=0&us_privacy=0&callback=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D293%26euid%3D%7Bym_user_id%7D
IP
ASN #45102 Alibaba US Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dsp/user/sync?dspid=c2FwZV9kc3A=&gdpr=0&gdpr_consent=0&us_privacy=0&callback=https%3A%2F%2Fmc.acint.net%2Fmatch%3Fdp%3D293%26euid%3D%7Bym_user_id%7D HTTP/1.1
Host: gw-iad-bid.ymmobi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 15:18:43 GMT
content-length: 0
location: https://mc.acint.net/match?dp=293&euid=ym_user_8bb3cc55-a24e-46e9-9ca5-0a27b4dbcca2
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token
access-control-allow-credentials: true
set-cookie: ym_user_cookie=ym_user_8bb3cc55-a24e-46e9-9ca5-0a27b4dbcca2; max-age=31104000; domain=ymmobi.com; path=/; secure; SameSite=None
X-Firefox-Spdy: h2
adx.com.ru/sape-sync?uid=0500007F52463A665236996E020532BB
169 B URL adx.com.ru/sape-sync?uid=0500007F52463A665236996E020532BB
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 5974b7b0a4b06e9c2da4b0c7448ed7c0
f8260d70d9cffdb0522e4e5d326c07117fd8947c
c9878bc7dccad3a43bbe44367be20caf9ba94fb40e84c038ea49f6dafb19daa1
GET /sape-sync?uid=0500007F52463A665236996E020532BB HTTP/1.1
Host: adx.com.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.acint.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
server: nginx/1.26.0
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 169
X-Firefox-Spdy: h2
www.acint.net/match?dp=251&euid=187da8a4-5e7b-8768-ed39-68cc113f0aec
43 B URL www.acint.net/match?dp=251&euid=187da8a4-5e7b-8768-ed39-68cc113f0aec
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=251&euid=187da8a4-5e7b-8768-ed39-68cc113f0aec HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122; cSyncDp7v3=1715095123
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.acint.net/cmatch?dp=126
154 B URL mc.acint.net/cmatch?dp=126
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=126 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122; cSyncDp7v3=1715095123
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
set-cookie: cSyncDp241v2=1715095123; expires=Thu, 06-Jun-24 15:18:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
acint.net/cmatch?dp=71
154 B IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=71 HTTP/1.1
Host: acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122; cSyncDp7v3=1715095123
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
set-cookie: cSyncDp241v2=1715095123; expires=Thu, 06-Jun-24 15:18:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
pix.bumlam.com/sync/sape/sync_ok?guid=1718da46-0c85-11ef-86e0-002590c0647c
0 B URL pix.bumlam.com/sync/sape/sync_ok?guid=1718da46-0c85-11ef-86e0-002590c0647c
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sync/sape/sync_ok?guid=1718da46-0c85-11ef-86e0-002590c0647c HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 07 May 2024 15:18:43 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Location: https://1718da46-0c85-11ef-86e0-002590c0647c.n4.sync.bumlam.com/?src=sape
mc.acint.net/cmatch?dp=95
154 B URL mc.acint.net/cmatch?dp=95
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=95 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122; cSyncDp7v3=1715095123
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
set-cookie: cSyncDp241v2=1715095123; expires=Thu, 06-Jun-24 15:18:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.acint.net/cmatch?dp=261
154 B URL mc.acint.net/cmatch?dp=261
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash cfbeaf604823f038b8b46f0ac862b98c
7b9eb1dac48e74fa5f418bc456cb410f88b81d98
20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
GET /cmatch?dp=261 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122; cSyncDp7v3=1715095123
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: text/html
content-length: 154
location: https://match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
set-cookie: cSyncDp241v2=1715095123; expires=Thu, 06-Jun-24 15:18:43 GMT; path=/; Secure; SameSite=None; domain=.acint.net
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
mc.acint.net/match?dp=293&euid=ym_user_8bb3cc55-a24e-46e9-9ca5-0a27b4dbcca2
43 B URL mc.acint.net/match?dp=293&euid=ym_user_8bb3cc55-a24e-46e9-9ca5-0a27b4dbcca2
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /match?dp=293&euid=ym_user_8bb3cc55-a24e-46e9-9ca5-0a27b4dbcca2 HTTP/1.1
Host: mc.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122; cSyncDp7v3=1715095123
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:18:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
expires: Wed, 19 Apr 2000 11:43:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
X-Firefox-Spdy: h2
endpoints.dochase.com/?seat=evxGM8Wybgk6hDa9lZoy&token=ggVl8a4pY8KlsunXQ24YAedeD25lKPrm&cb=1715095123.4731178&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&ip=192.168.110.150%3A18600&w=400&h=225&url=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&domain=rutor.is&cat=324&ref=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&maxduration=40&minduration=1&playerwidth=400&playerheight=225&publisher_id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
21 B URL endpoints.dochase.com/?seat=evxGM8Wybgk6hDa9lZoy&token=ggVl8a4pY8KlsunXQ24YAedeD25lKPrm&cb=1715095123.4731178&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&ip=192.168.110.150%3A18600&w=400&h=225&url=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&domain=rutor.is&cat=324&ref=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&maxduration=40&minduration=1&playerwidth=400&playerheight=225&publisher_id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
IP
File type ASCII text, with no line terminators
Hash 13ac7a47804f191f7cbe9b50641403d8
32f847ad3e7ef2388d22268a5164b46cae07e593
64a76d85490bf923477d715fb998da7a59c66988a645d080e2436f40cb3190f6
GET /?seat=evxGM8Wybgk6hDa9lZoy&token=ggVl8a4pY8KlsunXQ24YAedeD25lKPrm&cb=1715095123.4731178&ua=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&ip=192.168.110.150%3A18600&w=400&h=225&url=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&domain=rutor.is&cat=324&ref=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&maxduration=40&minduration=1&playerwidth=400&playerheight=225&publisher_id=9543c5ba-4faa-c88f-fa76-17c59e0da17f HTTP/1.1
Host: endpoints.dochase.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rutor.is
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:18:44 GMT
Content-Type: text/xml
Content-Length: 21
Connection: keep-alive
Access-Control-Allow-Origin: https://rutor.is
Access-Control-Allow-Credentials: true
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
X-Frame-Options: DENY
1718da46-0c85-11ef-86e0-002590c0647c.n4.sync.bumlam.com/?src=sape
0 B URL 1718da46-0c85-11ef-86e0-002590c0647c.n4.sync.bumlam.com/?src=sape
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?src=sape HTTP/1.1
Host: 1718da46-0c85-11ef-86e0-002590c0647c.n4.sync.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.26.0
date: Tue, 07 May 2024 15:18:44 GMT
content-length: 0
location: https://pix.bumlam.com/sync/sape/done
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
X-Firefox-Spdy: h2
match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
0 B URL match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
IP
ASN #12695 LLC Digital Network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0500007F52463A665236996E020532BB HTTP/1.1
Host: match.qtarget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 15:18:44 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
pix.bumlam.com/sync/sape/done
43 B URL pix.bumlam.com/sync/sape/done
IP
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync/sape/done HTTP/1.1
Host: pix.bumlam.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Cookie: suuid3=IiQxNzE4ZGE0Ni0wYzg1LTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:18:44 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Access-Control-Allow-Origin: https://www.acint.net
Access-Control-Allow-Credentials: true
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
Pragma: no-cache
Expires: 05-Jun-2005 22:00:00 GMT
X-Xss-Protection: 0
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
0 B URL match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
IP
ASN #12695 LLC Digital Network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0500007F52463A665236996E020532BB HTTP/1.1
Host: match.qtarget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 15:18:44 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
0 B URL match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
IP
ASN #12695 LLC Digital Network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0500007F52463A665236996E020532BB HTTP/1.1
Host: match.qtarget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 15:18:44 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
0 B URL match.qtarget.tech/userbind?src=sape&id=0500007F52463A665236996E020532BB
IP
ASN #12695 LLC Digital Network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /userbind?src=sape&id=0500007F52463A665236996E020532BB HTTP/1.1
Host: match.qtarget.tech
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.acint.net/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx/1.22.1
Date: Tue, 07 May 2024 15:18:44 GMT
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Vary: Origin
user91471.clients-cdnnow.ru/vp_dist/hls.js?v3
255 kB URL user91471.clients-cdnnow.ru/vp_dist/hls.js?v3
IP
File type JavaScript source, ASCII text
Size 255 kB (255269 bytes)
Hash ce2abcd2676d0413d790608cbbc9ee6e
2093c0350665e1acc90153b8d4b5fd376f04b1ca
c1dc1c78217e5f3bde32926307cfd09b217e13fe7221a540d3f3991fa979fe35
GET /vp_dist/hls.js?v3 HTTP/1.1
Host: user91471.clients-cdnnow.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:44 GMT
content-type: application/javascript
last-modified: Tue, 05 Mar 2024 14:56:11 GMT
vary: Accept-Encoding
etag: W/"65e7328b-1132d6"
x-movieads-country: RU
content-encoding: gzip
x-edge-cache: HIT
x-edge-ip: 172.19.32.3
X-Firefox-Spdy: h2
videotoday.site/mp_dist/td/trhls.html?v6774352230
161 kB URL videotoday.site/mp_dist/td/trhls.html?v6774352230
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (7914)
Size 161 kB (160598 bytes)
Hash e2b7fe8ca5ded3441ceb57849100d840
3b92cf354e5e82d0b8e2604d6ab33a01a56f7266
9b55240774fd2e6418c2674edac975e47438c11f39a4842c467ee36719c2f2f8
GET /mp_dist/td/trhls.html?v6774352230 HTTP/1.1
Host: videotoday.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 15:18:44 GMT
content-type: text/html
last-modified: Fri, 03 May 2024 13:20:31 GMT
vary: Accept-Encoding
x-movieads-country: NO
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-max-age: 1728000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vZXTdT39vrG5w33LApDAToRsrrpb4wPJ9VovlOaX%2FxBFc%2FEblOeBTcO8eAJelKTN9OvUWDNh6lWHRwV6Z7Z4vRglreVXKLUVDUpuPWEP1kUt8uetDwTscMgfFuQhMNe8QUk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88022f2eecd80b45-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/seg-2-v1-a1.ts
229 kB URL static.filmskino.site/hls/trailers/VyOL3Oik_EE.mp4/seg-2-v1-a1.ts
IP
ASN #6681 Giveme Cloud Sp Z O O
File type MPEG transport stream data
Size 229 kB (228984 bytes)
Hash ce2430efcb212bcafc71d2d60e2c1e51
3ed030e25277606874324bec24b16dbc0f94209d
267336ca3ea3ea22c2c6791d35402f82c88911cd6995d847dda81974c96d5beb
GET /hls/trailers/VyOL3Oik_EE.mp4/seg-2-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:18:45 GMT
Content-Type: video/MP2T
Content-Length: 228984
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-37e78"
Expires: Thu, 15 Aug 2024 15:18:45 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=btwcookie&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=btwcookie&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-length: 0
location: https://ads.betweendigital.com/match?bidder_id=34348&callback_url=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dbtwcookie%26bid%3D%24%7BUSER_ID%7D
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=ohmybid&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=ohmybid&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=hbrdcookie2&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=hbrdcookie2&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=otmbid&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otmbid&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=bzcookie&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=bzcookie&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=gonetbid&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gonetbid&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-length: 0
location: https://sync.gonet-ads.com/match/SkyAdvert?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=solta&rnd=1715095140
301 Moved Permanently 0 B URL GET HTTP/2 code.moviead55.ru/go/cinit?cn=solta&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Requested by https://rutor.is/torrent/933892e
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9
ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=solta&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-length: 0
location: https://kimberlite.io/rtb/sync/skyadvert?u=9543c5ba-4faa-c88f-fa76-17c59e0da17f
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=gtnt&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=gtnt&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-length: 0
location: https://px.adhigh.net/p/cm/skyadvert?u=9543c5ba-4faa-c88f-fa76-17c59e0da17f
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=dgm2&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=dgm2&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-length: 0
location: https://sync.opendsp.ru/match/MovieAds?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=otclkbid&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=otclkbid&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715095140
0 B URL code.moviead55.ru/go/cinit?cn=sapecookie&rnd=1715095140
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/cinit?cn=sapecookie&rnd=1715095140 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/jpeg
content-length: 0
x-movieads-country: NO
X-Firefox-Spdy: h2
sp.ohmy.bid/cmf?0.1798601751914617
0 B URL sp.ohmy.bid/cmf?0.1798601751914617
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cmf?0.1798601751914617 HTTP/1.1
Host: sp.ohmy.bid
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: uid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d.663a4652.43a82418dcf2c89c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
bidder: bid-11 1.1542.871fc768
access-control-allow-credentials: true
X-Firefox-Spdy: h2
sync.opendsp.ru/match/MovieAds?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
43 B URL sync.opendsp.ru/match/MovieAds?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
IP
ASN #50340 OOO Network of data-centers Selectel
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/MovieAds?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f HTTP/1.1
Host: sync.opendsp.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
sync.gonet-ads.com/match/SkyAdvert?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
43 B URL sync.gonet-ads.com/match/SkyAdvert?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f
IP
File type GIF image data, version 89a, 1 x 1
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /match/SkyAdvert?id=9543c5ba-4faa-c88f-fa76-17c59e0da17f HTTP/1.1
Host: sync.gonet-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:00 GMT
content-type: image/gif
content-length: 43
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2
kimberlite.io/rtb/sync/skyadvert?u=9543c5ba-4faa-c88f-fa76-17c59e0da17f
0 B URL kimberlite.io/rtb/sync/skyadvert?u=9543c5ba-4faa-c88f-fa76-17c59e0da17f
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rtb/sync/skyadvert?u=9543c5ba-4faa-c88f-fa76-17c59e0da17f HTTP/1.1
Host: kimberlite.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: as=-WrUeGY6RlKE8n8IZjpGUg; f=https%3A%2F%2Fcode.moviead55.ru%2Fgo%2Fcsync%3Fcn%3Dsolta%26bid%3DZjpGUp7irjs; n=2; u=ZjpGUp7irjs~5DHwFV0oRTz0qPUS9OMDCwmar00
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 07 May 2024 15:19:00 GMT
Content-Length: 0
Connection: keep-alive
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: as=OFrH4WY6RmSE8n8IZjpGUvlq1HhmOkZS; max-age=604800; samesite=none; httponly; secure
n=3; max-age=30; samesite=none; httponly; secure
location: https://sm.rtb.mts.ru/p?ssp=toptraffic&id=ZjpGUp7irjs
referrer-policy: no-referrer
server-timing: app;srv=0;dur=0.0003
code.moviead55.ru/go/bn?key=ea59f7a89d04d570fbb4ef98a8a1693c&cp.adsource=Infin_inf_br&vt=100&w=300&h=250&cp.referer=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&fid=22c7f43fe1b8352b&cp.tanc=
32 kB URL code.moviead55.ru/go/bn?key=ea59f7a89d04d570fbb4ef98a8a1693c&cp.adsource=Infin_inf_br&vt=100&w=300&h=250&cp.referer=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&fid=22c7f43fe1b8352b&cp.tanc=
IP
ASN #6681 Giveme Cloud Sp Z O O
File type gzip compressed data, from Unix
Hash ffaa846bbccac03113350fea5172390f
33984336387550b9b5fd806c6048117e751cd5b9
54e6cd67b71925119d71d8ec90f62caa4bf8a1f9762dc1cca3a1fd26445a5765
GET /go/bn?key=ea59f7a89d04d570fbb4ef98a8a1693c&cp.adsource=Infin_inf_br&vt=100&w=300&h=250&cp.referer=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&fid=22c7f43fe1b8352b&cp.tanc= HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:57 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-path: /
x-movieads-referrer: https://rutor.is/
access-control-allow-credentials: true
access-control-allow-origin: https://rutor.is
x-movieads-udata: cache,parsed,215878
x-cache-source: Rist
x-movieads-mrc: no
x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"rutor.is","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""}
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/index.m3u8
333 B URL static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/index.m3u8
IP
ASN #6681 Giveme Cloud Sp Z O O
Hash 22674f36fe3804f7b4343af9da1571c2
986a17a8022615da75617a0a0cbc7b2bc67fa460
80488322784b81ad0527317ba5fc32b8977fb60d216430b24cb69136890bbcd3
GET /hls/trailers/arJIA_8cyT0.mp4/index.m3u8 HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:19:02 GMT
Content-Type: application/vnd.apple.mpegurl
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"3a1794b0-ff7"
Expires: Thu, 15 Aug 2024 15:19:02 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www.acint.net/mc/?dp=167
238 kB IP
File type gzip compressed data, from Unix
Size 238 kB (238172 bytes)
Hash 6e62b0999bc284b6f12a6b1afde61925
1ce8431e9af85ae01ace9218259f82c737c73958
99308be41123ad54066b4dc2a8b08137f769404dd2576293c74d77ba661dd149
GET /mc/?dp=167 HTTP/1.1
Host: www.acint.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: test_cookie=CheckForPermission; aid=fwAABWY6RlJumTZSuzIFAijbE1hQS5MSdzNHj6MkrGNPXIvD; cSyncDp14v4=1715095122; cSyncDp14v6=1715095122; cSyncDp17v2=1715095122; cSyncDp45v5=1715095122; cSyncDp53v5=1715095122; cSyncDp62v2=1715095122; cSyncDp67v3=1715095122; cSyncDp68v3=1715095122; cSyncDp71v2=1715095122; cSyncDp80v2=1715095122; cSyncDp85v2=1715095122; cSyncDp95v4=1715095122; cSyncDp98v3=1715095122; cSyncDp104v2=1715095122; cSyncDp107v2=1715095122; cSyncDp110v3=1715095122; cSyncDp125v4=1715095122; cSyncDp126v3=1715095122; cSyncDp127v2=1715095122; cSyncDp129v2=1715095122; cSyncDp136v3=1715095122; cSyncDp146v2=1715095122; cSyncDp148v2=1715095122; cSyncDp149v3=1715095122; cSyncDp151v2=1715095122; cSyncDp251v1=1715095122; cSyncDp186v2=1715095122; cSyncDp217v2=1715095122; cSyncDp235v2=1715095122; cSyncDp239v2=1715095122; cSyncDp243v2=1715095122; cSyncDp260v2=1715095122; cSyncDp244v2=1715095122; cSyncDp248v2=1715095122; cSyncDp261v1=1715095122; cSyncDp289v2=1715095122; cSyncDp293v1=1715095122; cSyncDp296v2=1715095122; cSyncDp312v1=1715095122; cSyncDp7v3=1715095123; cSyncDp241v2=1715095123
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: openresty
date: Tue, 07 May 2024 15:19:00 GMT
content-type: text/html
p3p: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL"
content-encoding: gzip
X-Firefox-Spdy: h2
static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts
226 kB URL static.filmskino.site/hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts
IP
ASN #6681 Giveme Cloud Sp Z O O
File type MPEG transport stream data
Size 226 kB (225976 bytes)
Hash 023aed136f0161337a6541e5eeb24d70
d2fc4342a9668b0a1fe2b86f2383b8f6a7cc5887
001d1cce503c2f072d35e13f148520c407541e6bc0ac8c8f66e5f64537684663
GET /hls/trailers/arJIA_8cyT0.mp4/seg-2-v1-a1.ts HTTP/1.1
Host: static.filmskino.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://videotoday.site
DNT: 1
Connection: keep-alive
Referer: https://videotoday.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 07 May 2024 15:19:02 GMT
Content-Type: video/MP2T
Content-Length: 225976
Last-Modified: Sun, 19 Nov 2000 08:52:00 GMT
Connection: keep-alive
ETag: "3a1794b0-372b8"
Expires: Thu, 15 Aug 2024 15:19:02 GMT
Cache-Control: max-age=8640000
Access-Control-Allow-Headers: *
Access-Control-Expose-Headers: Server,range,Content-Length,Content-Range
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
code.moviead55.ru/go/bmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&maid=cf407170-39f7-4f16-9e15-8847a03fd567&rel=true&rnd=1715095132318&cnt=1
200 OK 44 kB URL GET HTTP/2 code.moviead55.ru/go/bmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&maid=cf407170-39f7-4f16-9e15-8847a03fd567&rel=true&rnd=1715095132318&cnt=1
IP
ASN #6681 Giveme Cloud Sp Z O O
Requested by https://rutor.is/torrent/933892e
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9
ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File type JavaScript source, ASCII text, with very long lines (43534), with no line terminators
Hash 467563b73e0d277f90d1bfa22426db16
4db54427b2bcc933a7cffa17d2a3eaa84888a374
ddcda9b680670d479e18bc8934482377d41d3887a7d8770234c3c793f2951af2
GET /go/bmap?v=ea59f7a89d04d570fbb4ef98a8a1693c&sub_id=ap&fmt_id=4&pl_key=banner&testad=no&r=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&maid=cf407170-39f7-4f16-9e15-8847a03fd567&rel=true&rnd=1715095132318&cnt=1 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:18:57 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
x-movieads-udata: cache,parsed,47005
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
vak345.com/s.js?v=ea59f7a89d04d570fbb4ef98a8a1693c
200 OK 3.9 kB URL GET HTTP/2 vak345.com/s.js?v=ea59f7a89d04d570fbb4ef98a8a1693c
IP
Requested by https://rutor.is/torrent/933892e
Certificate IssuerGoogle Trust Services LLC
Subjectvak345.com
Fingerprint24:4A:87:25:20:E4:20:04:34:86:6B:9B:53:2A:57:5F:39:1D:94:22
ValiditySun, 07 Apr 2024 00:32:34 GMT - Sat, 06 Jul 2024 00:32:33 GMT
File type JavaScript source, ASCII text, with very long lines (4310), with no line terminators
Hash fcc807e0e4100b7e44b62bb3d4910af8
2b91a2cd63ff9be444c4dc0c85b2e200b73d1806
b73f5e0bafad8ede5c2877618ff20dc730a9ef4949fd90be126f093c18671792
GET /s.js?v=ea59f7a89d04d570fbb4ef98a8a1693c HTTP/1.1
Host: vak345.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 15:18:40 GMT
content-type: text/javascript;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-movieads-country: NO
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uUIh7e0t17Fwblq1Pjqu8sDePIdgS1hXPBg25khzaOW05BHK7CwjDHivdLaY5pxg6EmqPIGb1b%2BEHetC3IYvc7o0QYMFz2zUoLxmTfoll%2BeTQObvMaLy%2BO4Sm3ej"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 88022f180c6bb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
code.moviead55.ru/vast2?key=ea59f7a89d04d570fbb4ef98a8a1693c&sid=autoplay&cp.adsource=Dhs_out_g3&cp.adtype=pre&vt=100&fp=[fp]&w=400&h=225&vid=&fpro=&suri=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&rdd1=true&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F933892e&cp.cb=89c40f6f-0a39-2d5c-b19a-906025cb6621
200 OK 911 B URL GET HTTP/2 code.moviead55.ru/vast2?key=ea59f7a89d04d570fbb4ef98a8a1693c&sid=autoplay&cp.adsource=Dhs_out_g3&cp.adtype=pre&vt=100&fp=[fp]&w=400&h=225&vid=&fpro=&suri=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&rdd1=true&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F933892e&cp.cb=89c40f6f-0a39-2d5c-b19a-906025cb6621
IP
ASN #6681 Giveme Cloud Sp Z O O
Requested by https://rutor.is/torrent/933892e
Certificate IssuerLet's Encrypt
Subject*.moviead55.ru
FingerprintE4:F3:DB:F5:01:1C:F3:56:55:6B:F7:22:06:C7:C8:6E:DD:9D:B4:E9
ValidityThu, 22 Feb 2024 17:50:17 GMT - Wed, 22 May 2024 17:50:16 GMT
File type XML document, ASCII text, with very long lines (937), with no line terminators
Hash f8bf81ef39f62097274da717619be3bc
71d55a20842ed0bbf9eaeec1c616aa561f3255ca
a436c2091e8aba6a6b16424b03de68d7d52037d3676a68e8bf1de0ccbbc37c80
GET /vast2?key=ea59f7a89d04d570fbb4ef98a8a1693c&sid=autoplay&cp.adsource=Dhs_out_g3&cp.adtype=pre&vt=100&fp=[fp]&w=400&h=225&vid=&fpro=&suri=https%3A%2F%2Frutor.is%2Ftorrent%2F933892e&rdd1=true&cp.referer=https%253A%252F%252Frutor.is%252Ftorrent%252F933892e&cp.cb=89c40f6f-0a39-2d5c-b19a-906025cb6621 HTTP/1.1
Host: code.moviead55.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rutor.is
DNT: 1
Connection: keep-alive
Referer: https://rutor.is/
Cookie: sky_uuid=9543c5ba-4faa-c88f-fa76-17c59e0da17f; hbrdcookie2=ffdac1fb1195a3d73043; otclkbid=VU0cO9fZFTbYzyf; ohmybid=7bd617d4-1a50-44ef-ac55-fa7b1cc8d36d; bzcookie=1b1f458a-2975-4ba4-77aa-033abb4bcf76; sapecookie=0500007F52463A665236996E020532BB; 754rmads=1715095123; otmbid=NjYzYTQ2NTIwOGJmYzQwMg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 15:19:01 GMT
content-type: text/xml;charset=UTF-8
vary: Accept-Encoding
x-movieads-cors-qex: Referer
x-movieads-path: /
access-control-allow-credentials: true
access-control-allow-origin: https://rutor.is
x-movieads-udata: cache,parsed,42103
x-movieads-referrer: https://rutor.is/
x-cache-source: Rist
x-movieads-mrc: no
x-movieads-ref: {"Scheme":"https","Opaque":"","User":null,"Host":"rutor.is","Path":"/","RawPath":"","OmitHost":false,"ForceQuery":false,"RawQuery":"","Fragment":"","RawFragment":""}
set-cookie: 754rmads=1715095141; max-age=31536000; path=/; HttpOnly; secure; SameSite=None
x-movieads-country: NO
content-encoding: gzip
X-Firefox-Spdy: h2
193.46.255.26
172.67.168.127
51.77.200.203
31.220.27.134
31.172.81.160
193.3.184.131
77.91.100.49
188.42.105.220
0.0.0.0